I let a woman charge her USB-C phone from my MacBook at a coffee shop after the building's outlets didn't seem to work. Before connecting it, I clicked "Don't Allow" when macOS asked whether to permit the phone to access the computer. She charged it for roughly 5–10 minutes, and I didn't notice anything unusual about the interaction.
Afterward, I restarted the MacBook and checked for new files, applications, accounts, devices, extensions, login items, and permissions such as Full Disk Access, Accessibility, Input Monitoring, and Screen Recording. Nothing appeared out of place, and Terminal showed no recent history.
Could connecting the phone have exposed my MacBook to malware, a malicious cable, or some other kind of data breach? Are there any warning signs I should still watch for, or is denying the connection sufficient in this situation?
4 Answers
Nothing in your checks suggests a compromise. You didn’t find new software, accounts, permissions, devices, extensions, or files, and restarting the Mac was more than enough for this situation. You can continue using it normally; there’s no need to wipe the machine or change every password.
You’re almost certainly fine. The MacBook is the USB host, and you explicitly denied the phone permission to access data. In that situation, the connection should be limited to providing power, not transferring files or controlling the computer. A normal person charging a phone for a few minutes is not a realistic malware scenario, especially when you saw no changes afterward.
There is a theoretical possibility of a specially modified cable or device, but the threat model matters. Someone would generally need a specific reason to target you, and a brief charging session is not a likely attack. The practical advice is simply to stop monitoring for imagined signs and use the laptop normally.
For the future, carry a USB power-only cable or adapter. Those cables have the data connections removed, so they can supply power without allowing data communication. Clearly labeling one can also prevent accidentally using the wrong cable.
That’s a good precaution if you often help people charge devices, but it isn’t necessary to treat this incident as a breach. Denying the prompt already prevented the normal data-access route.
The only reasonable concern would be an unusually sophisticated malicious accessory or cable, but that’s far beyond what would normally be involved here. For an ordinary phone and cable, there’s no practical reason to keep worrying.