Hackers are using stolen Apple IDs to swipe cash in China

An Alipay digital payment app logo and smartphone sit on a desktop at the Wirecard AG headquarters in Munich, Germany, on Wednesday, Sept. 5, 2018. Commerzbank AG, part of the DAX Index stock gauge since its inception in 1988, will be replaced by fintech company Wirecard AG, index provider Deutsche Boerse AG said in a statement late on Wednesday. Photographer: Matthias Doering/Bloomberg

Ant Financial’s Alipay and Tencent Holdings Ltd warned that cyberattackers employed stolen Apple IDs to break into customers’ accounts and made off with an unknown amount of cash, in a rare security breach for China’s top digital payments providers. 

Alipay, whose parent also operates the world’s largest money market fund, said on its Weibo blog that it contacted Apple and is working to get to the bottom of the breach. It warned users that’ve linked their Apple identities to any payment services, including Tencent’s WePay, to lower transaction limits to prevent further losses. Tencent said in a separate statement it too had noticed the cyber-heist and reached out to the iPhone maker.