Apple has suspended a policy that meant users to reset their Apple ID password over the phone in exchange for relatively easy-to-obtain personal details: the email address, billing address and the last four digits of the credit card number associated with the account.
Hackers exploited the system to gain full control of Wired journalist Mat Honan's iCloud account and wipe his iPhone, iPad and Mac, including precious photographs of his young daughter that he had not backed up.
Source: Telegraph. Read full article. (link)