Frustrated Apple User sums it up as:
So Apple could do nothing and this guy is allowed to use my email as his apple ID as long as he wants and I will receive emails from Apple when he uses his device, etc.
It's an established problem with Apple authorization and authentication. (My account is gmail, but it's basically the same underlying problem.)
While probably not a phishing attack, it certainly could be malicious.
Thanks for contacting us. I'm sorry that you weren't able to reset your Apple ID password. I’ll do everything that I can to get your issue resolved. If you haven’t already, you can try resetting your password online at: http://iforgot.apple.com For more information on resetting your security questions, see this page: https://support.apple.com/HT201485 For security reasons, I can't help you access this account via email.
So far as I know my account has been hijacked. I say my account, because it's my e-mail address which is used to login. So far as I know this is some variant of a malicious social engineering attack.
How do I contact Apple by chat?
When I try to contact Apple through Chat I get:
and so cannot proceed with resetting the password.
Notably, signing up for a mailing list has better authentication and authorization.
Or, an e-mail address for Apple would be a good way to enter into a dialogue with them. Do they have an e-mail address? Their e-mail to me came from
firstname.lastname@example.org but they've already explained that they won't reset the password via e-mail.
When I try to contact Apple support through their website it goes in a loop where they want my Apple ID and then challenge me with secret questions.
At best it's annoying. At worst it's some sort of attack. This has been going on at least since 2016, we're almost in 2019.
This is the e-mail, or a portion of:
Welcome to iCloud. Your Apple ID is <me>@gmail.com. iCloud keeps all your photos and videos, documents, contacts, and more up to date automatically, so you always have access to the latest versions on all your devices.