My old Apple account was hijacked—can I recover it after the email and security answers were changed?

The best protection going forward is to use unique passwords and enable two-factor authentication on every important account, especially your primary email and any current Apple account. A trusted phone number or device can make future recovery possible, but it usually cannot override an ownership check on a legacy account after the attacker changes its recovery details.

Contact Apple Support and start the official account-recovery process, but older accounts that were created before two-factor authentication may have very limited recovery options once the security questions and contact email are changed. If Apple cannot verify ownership, the account may not be recoverable.

This can happen with forgotten pre-two-factor accounts, and support representatives may not be able to recover or delete them without sufficient verification. Ask Apple to document the compromise and confirm whether any payment information or active services remain, but be prepared for them to say they cannot restore access.

Treat the account as potentially exposed. Check every card and payment method that might have been associated with it, contact the card issuer if anything looks suspicious, and change any password that was reused there. Also secure the email account that originally received Apple’s notifications.