Wired reports that Apple has ordered its support staff to temporarily stop processing AppleID password changes over the phone. The move is a response to the experience of Wired reporter Mat Honan whohad his iCloud account hacked which resulted in the remote-wipe of his iPhone, iPad and MacBook Air. An Apple worker with knowledge of the situation, speaking on condition of anonymity, told Wired that the over-the-phone password freeze would last at least 24 hours. The employee speculated that the freeze was put in place to give Apple more time to determine what security policies needed to be changed, if any. Wired was able to confirm the policy change by calling Apple Support and attempting to reset the password on an iCloud account. Meanwhile, Amazon has also changed their policy in the wake of the hacking report. Amazon no longer allows people to call in and change their credit card or email address settings. Hackers had taken advantage of Amazon’s policies in order to expose the last four digits of Honan’s credit card which was then used to take over his iCloud account.

See the article here:
Apple Temporarily Halts Over-the-Phone iCloud Password Resets