If you have an open iTunes account you might take a look at this account of hacking at MacWorld:
Bob Seifert lives in Wisconsin, and his story is a typical one. “Early in the morning on August 12,” he told Macworld, “I had gotten an email stating that my account was used to purchase [the free app] Instagram” from a device not previously linked to his account. “Shortly after that, I got another email, stating that another free app was purchased—a Chinese one, this time. And then, they made an in-app purchase through that app of $19.99 for some in-game currency of some sort.”
https://www.macworld.com/article/161794/201...lsrc=twt_dmorenI've maintained a 84 cent balance in my account for at least 8 months and it's still there!
Note: I first looked at this MacWorld thing because it was mentioned at Boing Boing but that link appears to be trying to be redirected somewhere.
