This leads to the fact that if a copy is correct, security systems based on object ID verification are not capable of distinguishing between the two.

FORBES: Cyber Security Fails As 3.6 Million Social Security Numbers Breached In South Carolina

Apple hasn't been as direct about what's going on, but Wired believes there's been a 24-hour hold on phone-based Apple ID password resets while the company marshals its resources and decides how much extra strictness is required.

ENGADGET: Amazon, Apple stop taking key account changes over the phone after identity breach