Easy; it's the hacker. Whether the false information is publicly available is not a defense to fraud. Fraud is presenting false information (public or not) as true (in this case, that the serial number of the item belongs to you as a bona fide purchaser) and an innocent party (Apple + the consumer) relying on it to their detriment.