Apple is currently facing a lawsuit from users concerning its anti-theft features, particularly in relation to data recovery for stolen devices. This legal action stems from a situation involving Michael Mathews in Minnesota, who is seeking at least $5 million in damages and access to 2TB of data that he claims is locked away following the theft of his iPhone.
According to reports from AppleInsider, Mathews lost not only his device but also critical data including photos, music, tax records, and important work-related research—a loss he describes as the disappearance of his and his family’s “entire digital lives.” The repercussions of this incident were significant enough that his technology consulting company was reportedly forced to close its doors.
The case highlights a critical security feature known as the Recovery Key, which is part of Apple’s Advanced Data Protection (ADP). While this 28-digit code is designed to help users regain access to their accounts if they forget their passwords, it has also created vulnerabilities in scenarios involving theft. If a thief gains access to the iPhone and knows the screen unlock passcode, they can reset the Apple ID and enable ADP, effectively locking the original owner out of their data. Without ADP, Apple retains a copy of the encryption key and can assist in data recovery.
Mathews’ lawsuit is currently in the evidence-gathering phase, with his attorney, K. Jon Breyer, arguing that Apple bears responsibility for retaining data it does not own, suggesting that the company had the technical ability to intervene but chose not to. While Apple has not specifically addressed the lawsuit, they have expressed sympathy for victims and emphasized their commitment to user security. This lawsuit raises important questions about the balance between robust security measures and the need for data recovery options in the event of theft.