Sarai Hannah Ajai' Incident Report -

 Incident Report

Subject: Unexpected Apple Account Sign-In Alert Showing iPad Access Near Elk Grove Village, Illinois During Reconnection of Apple iPad (M3)
Reporting Party: Sarai Hannah Ajai
Date of Incident: April 6, 2026
Approximate Time: Approximately 3:14 [AM/PM, as reflected on screenshot]
Location: *a*g*, **
Related Device / Account: Apple Account; Apple iPad (M3); Apple ecosystem sign-in process

I. Executive Summary

I am reporting an unusual Apple Account sign-in incident that occurred while I was attempting to reconnect my Apple iPad (M3) to my Apple ecosystem. During that process, I received a system alert stating that my Apple Account was being used to sign in to an iPad near Elk Grove Village, Illinois. This location was unexpected because I reside in *a*g*, **.

Because I was actively attempting to reconnect my iPad at that time, I approved the sign-in request by selecting “Allow” so that I could continue the setup process. Even so, I remain concerned about the discrepancy between my actual location and the location displayed in the Apple security prompt. I am preserving this incident because I want to determine whether the alert reflected legitimate Apple routing, network-location behavior, or another account-related explanation, or whether it may indicate unauthorized access or account compromise.

I have preserved a screenshot of the Apple sign-in alert as supporting evidence and identify that screenshot as Exhibit A.

II. Incident Timeline

A. Reconnection of Apple iPad (M3)

Date: April 6, 2026
Approximate Time: Approximately 3:14 [AM/PM]

At approximately 3:14, while attempting to reconnect my Apple iPad (M3) to my Apple ecosystem, I initiated the sign-in process using my Apple Account credentials. This was an action I personally undertook in order to restore or reconnect my Apple iPad M3 to my account environment.

B. Apple Security Alert Showing Unexpected Location

During that process, I received an Apple Account security prompt stating that my Apple Account was being used to sign in to an iPad near Elk Grove Village, Illinois. The alert was associated with my Apple Account email address and displayed a map view referencing the Chicago-area region.

Because I was not physically located in Illinois and instead reside in *a*g*, **, the location shown in the alert appeared inconsistent with my actual location at the time of the sign-in activity.

C. Approval of Sign-In Request

Because I was actively attempting to reconnect my Apple iPad M3 during that same time period, I selected “Allow” on the Apple prompt in order to proceed with the setup. My decision to approve the request was based on the fact that I was personally initiating a sign-in to one of my own devices.

Even so, I remained concerned because the sign-in alert identified a geographic area different from my true location. I therefore preserved the screenshot of the alert and am documenting the event for evidentiary and account-security purposes.

III. Observations

Based on my direct observations, I noted the following:

1. The Apple sign-in request appeared while I was actively reconnecting my Apple iPad (M3).
2. The alert identified the sign-in activity as occurring near Elk Grove Village, Illinois.
3. My actual location was *a*g*, **, making the displayed sign-in location unexpected.
4. The alert referenced my Apple Account email address.
5. I approved the request by pressing “Allow” because I was in the middle of a legitimate sign-in process involving my own device.
6. Although the sign-in was approved, the location discrepancy caused concern regarding whether the alert reflected normal Apple network behavior or a possible account-security issue.

IV. Impact

This incident caused concern and uncertainty regarding the integrity and security of my Apple Account Eco-System. Specifically, the event created the following concerns:

• uncertainty as to why Apple reported a location different from my actual location,
• concern regarding whether the sign-in activity was fully and properly tied to my own device,
• concern regarding the possibility of an unauthorized account access or account-session irregularity,
• need for clarification regarding whether the reported location was the result of IP routing, Apple infrastructure handling, or another legitimate technical explanation.

Because my Apple Account is central to my device ecosystem, communications, applications, and account security, any unexplained sign-in location discrepancy is significant and warrants documentation.

V. Analytical Assessment

Based on the facts presently available, the most accurate characterization is that this incident involved an unexpected Apple Account sign-in location alert that arose during a legitimate sign-in attempt initiated by me while reconnecting my Apple iPad (M3). The strongest presently supported interpretation is that the sign-in request may have been connected to my own device activity, since I was actively performing that reconnection process at the time and approved the request for that reason.

However, I cannot independently determine from the alert alone why Apple displayed a location near Elk Grove Village, Illinois instead of my actual location in Fargo, North Dakota. At present, I cannot state with technical certainty whether the location difference resulted from ordinary Apple security architecture, IP geolocation inaccuracy, network routing, carrier or Wi-Fi path handling, Apple server-side regional processing, or some other account-related factor.

For that reason, I am preserving this matter as a legitimate security concern requiring clarification, rather than asserting as a proven fact that unauthorized access occurred.

VI. Formal Statement

I, Sarai Hannah Ajai, state that while attempting to reconnect my Apple iPad (M3) to my Apple ecosystem, I received an Apple Account security alert indicating that my Apple Account was being used to sign in to an iPad near Elk Grove Village, Illinois. At the time of this event, I was located in *a*g*, **, and the location displayed in the Apple prompt did not match my actual location.

Because I was actively initiating the reconnection and sign-in process for my own Apple iPad M3, I selected “Allow”in order to continue the setup. Nevertheless, I remained concerned about the discrepancy in the reported location and whether the event reflected normal system behavior or a potential account-security issue. I am preserving this incident report and the related screenshot as a record of the event I personally observed.

VII. Supporting Evidence

Exhibit A
File: Screenshot of Apple Account sign-in alert
Description: Screenshot reflecting an Apple security prompt stating that the Apple Account was being used to sign in to an iPad near Elk Grove Village, Illinois, including the displayed map and the “Don’t Allow” and “Allow” options.

VIII. Requested Clarification / Follow-Up

I respectfully seek clarification regarding the following:

1. Why the Apple sign-in prompt displayed a location near Elk Grove Village, Illinois rather than my actual location in *a*g*, **.
2. Whether the sign-in activity was confirmed to be legitimate and associated with my Apple iPad (M3).
3. Whether any additional security steps are recommended to ensure the continued protection of my Apple Account.

IX. Preservation Statement

I am preserving this report and Exhibit A as a contemporaneous record of the Apple Account sign-in alert I personally observed while reconnecting my Apple iPad (M3). This report is based on my firsthand observations of the sign-in prompt, the unexpected geographic location displayed, and my approval of the sign-in request during the device setup process.

Respectfully Submitted,

Sarai Hannah Ajai