To all appearances, numerous user reports reached Cupertino, as the tech giant came up with an official statement about the scam: “Apple takes security very seriously and iCloud was not compromised during this incident. Impacted users should change their Apple ID password as soon as possible and avoid using the same user name and password for multiple services. Any users who need additional help can contact AppleCare or visit their local Apple Retail Store".
Hopefully, unaffected Apple users will take the necessary precautions in a timely manner and either change their Apple ID password or set up two-step verification on their accounts.
source: ZDNet via Apple Insider