Skip to main content

FBI: Crucial iCloud settings on San Bernardino shooter’s iPhone are disabled

If you’ve been staying even tangentially abreast of the ongoing case involving Apple, the Federal Bureau of Investigation, and San Bernardino shooter Syed Farook’s locked iPhone, this may sound familiar: The handset, which was configured to back up data via iCloud, was reset by San Bernardino county officials at the instruction of the FBI, precluding any attempt by investigators to obtain sought-after evidence from Apple’s servers. According to the FBI, though, that isn’t quite true. In court documents published on Thursday, the agency contended that many of the phone’s backup features had been disabled prior to the government’s investigation.

Specifically, the FBI tells the court that the phone had been powered down and password-protected when the agency recovered it, making both a backup at that point impossible; in a sworn statement, FBI engineer Stacey Perino said that “the device would not connect to a Wi-Fi network until the passcode was entered.” A subsequent analysis of an October 19 backup — the most recent available — found that the iCloud’s reset function had been used on October 22, months before the agency came into possession of the phone. Furthermore, the agency said, forensic examiners were able to determine that the phone’s email, photo, and note backups had been disabled, making the data that the government is seeking impossible to extract from subsequent cloud backups.

Recommended Videos

“The evidence on Farook’s iCloud account suggest that he had already changed his iCloud password himself on October 22, 2015 — shortly after the last backup — and that the auto-backup feature was disabled,” lawyers for the government wrote in the filing. “A forced backup of Farook’s iPhone was never going to be successful.”

Apple’s general counsel, Bruce Sewell, painted the FBI’s most recent filing as a “cheap shot” and an “unsupported, unsubstantiated effort to vilify Apple.” At a press conference on Thursday, he expressed incredulity at the government’s rhetorical bluntness. “In 30 years of practice, I don’t think I’ve ever seen a legal brief more intended to smear the other side … The one of the brief reads like an indictment.”

Sewell’s reaction aside, the FBI’s brief is much in line with what the agency and Justice Department have stated publicly over the past few weeks. At a congressional hearing in late February, FBI Director James Comey maintained that the agency’s reset instructions to the San Bernardino Department of Public Health — the authority charged with managing Farook’s iCloud account — were a “mistake.” But in subsequent comments, Comey and the Department of Justice have implied that a backup wouldn’t necessarily have contained the data investigators were seeking. “Even if the password had not been changed and Apple could have turned on the auto-backup and loaded it to the cloud, there might be information on the phone that would not be accessible without Apple’s assistance,” the Justice Department said last month

County officials reset the password on December 6, a few weeks after the FBI acquired the phone.

Apple, for its part, argues that even the iCloud backup settings had been disabled locally, a remote backup might have been possible. In its motion to vacate the FBI’s court-ordered unlocking of the iPhone, the company said that the FBI did not seek its technical guidance prior to directing San Bernardino officials to change the iCloud account password. “Unfortunately, the FBI, without consulting Apple or reviewing its public guidance regarding iOS, changed the iCloud password associated with one of the attackers’ accounts,” said Apple in a court filing, “foreclosing the possibility of the phone initiating an automatic iCloud backup of its data to a known Wi-Fi network.”

In the documents submitted Thursday, the FBI says that agents did consult with Apple, but that Apple ceased collaboration when investigators insisted on a method of extraction that would produce “the full set of data.” The agency from that point proceeded independently.

Thursday’s filing is only the latest development in a contentious legal face-off between Apple and the FBI. In February, the FBI obtained a court order compelling the company to create a customized version of iOS that would subvert the iPhone’s passcode lockout feature. Apple’s seeking to have that ruling overturned, arguing that it could set a dangerous and far-reaching precedent.

Apple has until March 15 to issue a reply to the government’s filing. The trial date is set for March 22.

Kyle Wiggers
Kyle Wiggers is a writer, Web designer, and podcaster with an acute interest in all things tech. When not reviewing gadgets…
Will my iPhone get iOS 26? Here’s every supported model
We've got the full list of iOS 26 supported devices - find out if you're getting the new iPhone update
iOS 26 features on a series of iPhone screens

Apple announced iOS 26 at WWDC 2025, and the new iPhone update comes with a fresh new 'Liquid Glass' look and plenty of features - and there are loads of iOS 26 supported devices, which is great news.

And no, you haven't missed a volley of updates since iOS 18 in 2024. Apple has skipped a bunch of numbers, so instead of giving us iOS 19 in 2025, we got iOS 26 alongside iPadOS 26, macOS 26, watchOS 26 and tvOS 26. In short, Apple's brought its operating system numbering into line. Nice.

Read more
iPhone 17 price looks more certain to rise for first time since the iPhone 12
Apple might be preparing its first iPhone price increase in five years
iPhone 16 Pro Max next to the 16 Plus, 16 Pro and regular iPhone 16

For years now, Apple has launched the base model iPhone at $799 - but in 2025, more and more signs are pointing towards prices being increased for the introduction of the iPhone 17.

The likelihood of an iPhone 17 price increase was raised by the Wall Street Journal in May, and now Counterpoint Research notes in its recent 2025 shipment forecast that "cost increases are expected to be passed on to consumers" by not only Apple, but Samsung as well.

Read more
Why you shouldn’t care what number Apple puts on your iPhone’s software
The Apple iPhone 16 Pro Max's screen.

One number may change to another number at an important industry event on June 9, and despite some of the headlines that have been circulating around the news, this succinct explanation of what may happen allows you to guage its real importance. Apparently, Apple may use the WWDC 2025 keynote presentation to announce a change from the expected iOS 19 software’s name to iOS 26, and here’s why you shouldn’t worry about it. 

Many people won’t even know

Read more