A San Francisco man was charged with defrauding Apple out of about $2.5 million worth of gift cards and products.
The man, Noah Roskin-Frazee, was acknowledged in a January 22 security update from Apple sent about two weeks after his arrest, according to a report from CourtWatch and 404 Media, which first reported on Roskin-Frazee’s unsealed indictment.
It is unclear why Roskin-Frazee was thanked in the Apple update, and the company did not respond to Business Insider’s request for comment. According to the 404 Media and CourtWatch report, Roskin-Frazee, a security researcher, had previously reported issues to the tech giant.
The US Attorney’s Office in San Francisco filed an indictment in December 2023 charging Roskin-Frazee and a co-defendant with fraud and intentionally damaging a protected computer.
The indictment alleges a complex scheme in which Roskin-Frazee and a co-defendant used a password reset function to break into the account of an employee who worked with Apple customers and then edited orders for things like gift cards and devices. According to the indictment, in some cases, they edited the orders to make them equal $0 or had gift cards sent to fake addresses, which they then resold.
According to the indictment, they took home approximately $2.5 million in products, services, and gift cards.
Though Apple isn’t explicitly mentioned in the indictment, CourtWatch and 404 Media point out that the company is headquartered in Cupertino, California, and “developed, manufactured, licenced, supported, and sold computer software, consumer electronics, personal computers, and services.”