First!

'customers who had weak passwords compromised'.

I guess now we'll hear from all the people who think Apple should look over your shoulder while you select a password and make sure the password meets Apple's standards.

After that, we'll hear from all the people protesting Apple's interference in your selecting any password you want - no matter how weak it is.

After all, we all know that whatever happens, it's Apple's fault (unless something good happens, and then it's clearly not Apple's doing).

This sounds like bullcrap from Apple. How can 400 accounts make 40 books to jump into top 50 if we have over 150.000.000 iTunes accounts? Is 400 purchased copies enough to get to top selling?

I'm curious how Apple came to the conclusion their statement implies: That weak user passwords is the sole vulnerability that was exploited. I certainly wouldn't argue against it being the most likely cause. Probably far more than 400 out of any set of 150 million people would unwisely choose to use weak passwords even if the account ties to their credit card. But how do they know? Was it simply a process of elimination - "We verified that our servers weren't compromised so it must have been guessed passwords," - or do they have some evidence that Thuat used a password cracker program? I hope its more than the former because its pretty tough to prove the negative that servers weren't compromised.

Since this is a fraud case, is the FBI going to investigate?

ONLY?

wtf, guys.

Thankfully mine was not breached.

Woops I guess this horse was already beaten. Forget what i said.

Only 400 iTunes accounts compromised in fraud, Apple says

"Only...," tell that to one of the 400 that it is only. I am sure no one here would want to be one of the "only."

Hopefully Apple takes steps to fix this long term and plugs other holes. If they're not already they should hire pro-hackers to help them spot issues.