> He used similar methods to access Mr Brennan’s AOL account and eventually Gamble was able to access his emails, contacts, his iCloud storage account and his wife’s iPad remotely.
Too crazy.
Too crazy.
https://support.apple.com/en-us/HT204915
though I don't know if the security question reset path is closed.
There was a small flare up earlier this year about people hijacking cell phone numbers, which then of course let's you take over all sorts of accounts since you can defeat the (relatively) poor security of SMS-based OTP.