Apple: We Didn't Give FBI Any Device IDs
Apple has finally weighed in on hacker group AntiSec's claims that it has obtained millions of unique device identifiers for Apple devices (UDIDs) from an FBI laptop. The gist of its comment: If the FBI has iPhone and iPad UDIDs, it didn't get them from us.
Context & Ripple Effects
The denial lands one day after AntiSec published 1,000,001 Apple device IDs it says came from an FBI laptop, part of a claimed haul of more than 12 million UDIDs. The leak itself is confirmed — the identifiers are real and public — but the provenance claim rests entirely on the hackers' word, which is why Apple's statement matters: it forces the question of whether the FBI collected this data from Apple or from some other path.
Apple's response also arrives against a backdrop of documented identifier exposure: an earlier Ars Technica analysis showed how iPhones broadcast identifying information to networks they access, meaning UDIDs circulate through channels well beyond Apple's own servers. The pickup was broad — eight outlets including NYT Bits, CNET, Gizmodo and The Verge ran the story the same day — reflecting how directly the leak touches consumer trust ahead of Apple's confirmed September 12 event.
First-order effects
- Apple's flat denial shifts the burden of proof onto the FBI, which now faces pressure to explain how millions of device identifiers tied to its systems ended up in hacker hands if not via an Apple-to-agency channel.
- AntiSec's central claim — that the FBI held a database of Apple UDIDs at all — remains unconfirmed rumor; only the publication of over 1 million identifiers is verified fact.
Second-order effects
- App developers and ad networks that collect UDIDs come under fresh scrutiny, since any third-party aggregation path would explain the FBI's alleged dataset without implicating Apple directly.
- The episode hands privacy advocates a concrete artifact — a million real device IDs — to argue that identifier collection by any party, corporate or governmental, creates breach risk downstream.
Third-order effects
- If the pattern holds, disputes over what device makers share with law enforcement become a recurring fault line for Apple, with each denial or disclosure resetting expectations for how much visibility governments should have into device-level data.
- The incident pushes the industry toward treating hardware identifiers as sensitive credentials rather than open tracking keys, since their aggregation by any single custodian proves to be a single point of failure.
The trend: Device identifiers are becoming contested ground between platform makers, law enforcement and hackers, with each leak forcing companies to draw sharper lines around what they hand to governments.