Has someone hacked my iPhone? Help!

[bluespitfire]

I received this email today:

Your Apple ID was used to sign in to FaceTime and iMessage on an iPhone named â??iPhoneâ?.
Date and Time: 16 August 2015, 1:47 AM
Operating System: iOS 8.4.1
If the information above looks familiar, you can disregard this email.
If you have not recently signed in to an iPhone with your Apple ID and believe someone may have accessed your account, go to My Apple ID ( appleid.apple.com ) and change your password as soon as possible.
Sincerely,

Has someone hacked my iPhone? What could they have seen?

I don't have much to hide but I was asleep at 1:47 this morning.

I've changed my password but I'm panicking slightly.

[HelenF35]

Sounds like a phishing email

[NerrSnerr]

Just a phishing email. Don't click on any of the links!

[NerrSnerr]

When you changed your Apple ID password did you go through the email?

[bluespitfire]

Do you mean it was after my information? If so I didn't click on the email link.

[bluespitfire]

No I changed my password on my phone in settings.

Was that right?

[NerrSnerr]

Yes, they want you to click the link on the email, that takes you to a fake login page and they take your password from there. If you didn't click the links then you'll be fine.

[NerrSnerr]

Yes that's fine. I would just delete the email and forget about it.

[noblegiraffe]

A real email from Apple will have your full name in it. If this one does I would go to the Apple site (but don't click links in the email) and change your password.

[noblegiraffe]

The email is the same text as a genuine one from Apple, btw, except the Apple one has Dear Full Name and the Apple id in question in brackets after the words Apple ID.

[bluespitfire]

It did have my Apple ID in brackets but I deleted that information to post on here.

[noblegiraffe]

Did it have your full name too? The sender should be [email protected]

If so, it could be genuine, and you should check your account hasn't been used to make any purchases, and change any other accounts that use the same password.

[bluespitfire]

The original email said 'Your Apple ID ([email protected])

That's the bit I deleted for my OP.

[bluespitfire]

I don't use that password for anything else.

I'll check the email address it was sent from...back in a minute.

[bluespitfire]

Yes. It was sent from [email protected]

How would I know if any purchases had been made?

[noblegiraffe]

Did it definitely have your full real name?

I normally get an email confirming purchases when I make them, so no emails would be a good sign. Can you check an online bank statement? Maybe keep an eye on that over the next few days, I don't know how long purchases take to go through.

[bluespitfire]

Yes the email had my name in it.

Could someone have accessed my texts and things like that?

[noblegiraffe]

If you received any iMessages, they will have received them too. I think they might be able to see old iMessages, and your Facetime log.

They won't have been able to read old text messages, but could have received any that you received after they logged in, if they also have your phone number.

I'm just going off what it looks like from my iPad which I recently synced to my phone, rather than any technical info.

[bluespitfire]

Ok, thank you noble