In the nut shell, a hacker is sending about phishing emails to people with iCloud accounts. People are responding and giving out personal information. The hacker then accesses your account which of course contains your information including your location.
How to prevent this?
- Never open suspicious emails
- Never give out personal information or passwords.
- Have a strong password, at least 12 characters.
Android users, your next. Better to do something now than have to do it later.