Everipedia Logo
Everipedia is now IQ.wiki - Join the IQ Brainlist and our Discord for early access to editing on the new platform and to participate in the beta testing.
iCloud leaks of celebrity photos

iCloud leaks of celebrity photos

On August 31, 2014, a collection of almost 500 private pictures of various celebrities, mostly women, and with many containing nudity, were posted on the imageboard 4chan, and later disseminated by other users on websites and social networks such as Imgur and Reddit. The images were initially believed to have been obtained via a breach of Apple's cloud services suite iCloud,[1][2][3] or a security issue in the iCloud API which allowed them to make unlimited attempts at guessing victims' passwords.[4][5] However, access was later revealed to have been gained via spear phishing attacks.[6][7]

The event, which media outlets and Internet users referred to under names such as "The Fappening" (a portmanteau of the words "fap"—a slang term for masturbation—and the film The Happening[8][9]) and "Celebgate", was met with a varied reaction from the media and fellow celebrities. Critics felt that the distribution of the images was a major invasion of privacy for their subjects, while some of the allegedly depicted subjects questioned their authenticity. The leak also prompted increased concern from analysts surrounding the privacy and security of cloud computing services such as iCloud—with a particular emphasis on their use to store sensitive, private information.

Procurement and distribution

The images were obtained via the online storage offered by Apple's iCloud platform for automatically backing up photos from iOS devices, such as iPhones.[10] Apple later reported that the victims' iCloud account information was obtained using "a very targeted attack on user names, passwords and security questions", such as phishing and brute-force guessing.[6][7][11] It was initially believed that the images were obtained using an exploit in the Find My iPhone service.[10] Court documents from 2014 indicated that one user created a fake email account called "appleprivacysecurity" to ask celebrities for security information.[12] The photos were being passed around privately for at least a couple of weeks before their public release on August 31. There are claims that unreleased photos and videos exist.[13] The Daily Mail cited anonymous posters from 4chan and Deadspin who stated that a ring of hackers, traders, and sellers had been operating for months leading up to the mass release.[3]

The hacker responsible for the leak, who described themselves as being a "collector", distributed the leaked images on the image boards 4chan and Anon-IB in exchange for Bitcoin.[14][15] Ultimately, the images were widely circulated online via other channels, including Imgur and Tumblr. Celebrity gossip blogger Perez Hilton also re-posted some of the photos on his blog, but soon took them down and issued an apology, saying "he had acted in bad taste".[16][17]

A major center of activity was the link-sharing website Reddit,[18] where a subreddit was created for sharing the photos;[19] in a single day, it amassed over 100,000 followers. Reddit administrators were criticized for allowing this to take place in an alleged violation of their anti-doxing rules.[20][21] As McKayla Maroney claimed to be under 18 at the time the photos of her were taken, Reddit staff took photos of her down and warned that anyone re-posting them, or underage photos of Liz Lee which had been circulating prior to this incident, would be permanently banned from the site and could be prosecuted for distributing child pornography.[22] On September 7, citing copyright issues, Reddit banned its "TheFappening" subreddit,[19][23] also saying the workload of dealing with them had become too much.[24] Reddit banned another subreddit named "Fappening" on the same day.[23]

Content and affected celebrities

The original release contained photos and videos of more than 100 individuals that were allegedly obtained from file storage on hacked iCloud accounts,[25] including some the leakers claimed were A-list celebrities.[26][27] Shortly after the photos were leaked, several affected celebrities issued statements to either confirm or deny the photos' authenticity.[28][29] Celebrities who have confirmed the photos' authenticity include Jennifer Lawrence (confirmed by her publicist),[30] Kate Upton and her husband Justin Verlander (confirmed by Upton's lawyer),[31][32][33] Mary Elizabeth Winstead (confirmed on Twitter),[34][35] Jessica Brown Findlay (confirmed by spokesman),[36] Kaley Cuoco (confirmed via Instagram),[37][38] and Kirsten Dunst,[39] who also criticized the iCloud service.[40] Jill Scott confirmed on Twitter that one of the leaked photos was of her while stating that another was fake.[41]

Celebrities who have denied the photos' authenticity include Ariana Grande[42][43] and Yvonne Strahovski.[44] Olympic gymnast McKayla Maroney initially denied the images' authenticity on Twitter,[45][46] then later confirmed that the photos were legitimate while also stating she was underage at the time they were taken.[22] Victoria Justice denied that the photos were authentic but later stated on Twitter that she was pursuing legal actions and found the leak to be a massive invasion of not just her privacy, but of the privacy of all the celebrities affected by the leak.[42][47] Reports in October indicated that Nick Hogan was the first male star to be directly targeted by hackers; however, Hogan denied the pictures' authenticity.[48]

According to security expert Nik Cubrilovic, in addition to the photographs, other personal information such as text messages, calendars, address books, phone call logs and any other data stored on their phones and backed up to the service were also likely stolen.[49][50]

On September 20, 2014, a second batch of similar private photos of additional celebrities was leaked by hackers.[51] On September 26, 2014, a third batch was also leaked,[52] which was dubbed as "The Fappening 3".[53]


Actress Lena Dunham pleaded on Twitter for people not to view the pictures, saying doing so "violat[es] these women over and over again. It's not okay."[54] Actress Emma Watson condemned not only the release of the photos, but also "the accompanying comments [on social media] that show such a lack of empathy."[55] Actors Seth Rogen and Lucas Neff also spoke out against the hackers and people who posted the pictures.[56] Justin Verlander, then a pitcher for the Detroit Tigers, told the media prior to a game against the Cleveland Indians that he keeps his private life private and would rather focus on the Tigers' race with the Kansas City Royals for the AL Central title than be a distraction to his teammates.[57] Security analysts have stated that the breach could have been prevented through the use of two-factor authentication,[58] while a Forbes writer recommended turning off the iCloud "Photo Stream" feature (which uploads photos taken with an iOS device to iCloud servers automatically) entirely.[59]

The incident has been given many names, including "The Fappening" (a portmanteau of "The Happening" and "fap", an internet slang term for masturbation)[60] and "Celebgate" (a reference to the Watergate scandal).[61] The term "The Fappening" has received criticism from journalists like Radhika Sanghani of The Daily Telegraph and Toyin Owoseje of the International Business Times,[62] who said that the term not only trivialized the leak, but also, according to Sanghani, "[made] light of a very severe situation"; both articles used the term extensively to describe the event, including in the headlines.[63]

In an interview with The Wall Street Journal, Apple CEO Tim Cook stated that in response to the leaks, the company planned to take additional steps to protect the privacy and security of iCloud users in the future.[64] Notifications will be provided whenever data is restored to a device via iCloud and after logging into iCloud via a web browser,[65] in addition to existing notifications when a user's iCloud password is changed. Additionally, Apple will broaden and encourage the use of two-factor authentication in future versions of its software and operating systems, such as the then-upcoming IOS 8. In conclusion, he emphasized that "we want to do everything we can do to protect our customers, because we are as outraged if not more so than they are."[11]

Jennifer Lawrence contacted authorities and her publicist has stated that the authorities will prosecute anyone who posts leaked images of her.[66] Forbes columnist Joseph Steinberg questioned whether the reactions by law enforcement and technology providers indicated that celebrities were being treated differently from ordinary Americans, which, in the case of law enforcement, may be illegal.[67]

On October 1, 2014, Google was threatened with a lawsuit by lawyer Martin Singer for $100 million on behalf of unnamed victims of the leaks, alleging that Google had refused to respond to requests for the images to be removed from its platforms (including Blogger and YouTube), "[failing] to act expeditiously, and responsibly to remove the images", and "knowingly accommodating, facilitating, and perpetuating the unlawful conduct".[68][69]

In an interview with Vanity Fair, Lawrence called the leak a "sex crime" and a "sexual violation" and added, "anybody who looked at those pictures, you're perpetuating a sexual offense and you should cower with shame".[70] This view was contrasted by another victim of the hack, Emily Ratajkowski, who told GQ, "A lot of people who were victims of [the hack] said anyone who looks at these pictures should feel guilty, but I just don't think that's fair", and "I'm not sure that anyone who Googles it is necessarily a criminal. I think the people who stole the photos are".[71]


The FBI said that it was "aware of the allegations concerning computer intrusions and the unlawful release of material involving high profile individuals, and is addressing the matter."[72] Similarly, Apple stated that it had been investigating whether a security breach of the iCloud service was responsible for the leaked photographs, as per the company's commitment to user privacy.[58][73] On September 2, 2014, Apple reported that the leaked images were the result of compromised accounts, using "a very targeted attack on user names, passwords and security questions, a practice that has become all too common on the Internet".[6][7]

In October 2014, FBI searched a house in Chicago and seized several computers, cell phones and storage drives after tracking the source of a hacking attack to an IP address linked to an individual named Emilio Herrera. A related search warrant application mentioned eight victims with initials A.S., C.H., H.S., J.M., O.W., A.K., E.B., and A.H., which supposedly point to stolen photos of Abigail Spencer, Christina Hendricks, Hope Solo, Jennette McCurdy, Olivia Wilde, Anna Kendrick, Emily Browning, and Amber Heard. According to law enforcement officials, Herrera was just one of several people under investigation and the FBI carried out various searches across the country.[74][75][76]

Guilty pleas

In March 2016, 36-year-old Ryan Collins of Lancaster, Pennsylvania agreed to plead guilty to one count of unauthorized access to a protected computer to obtain information resulting in an 18-month sentence.[77] While no victims were named in the court documents, numerous media outlets connected Collins' case to The Fappening. During the investigation, it was found that Collins phished by sending e-mails to the victims that looked like they came from Apple or Google, warning the victims that their accounts might be compromised and asking for their account details. The victims would enter their passwords, and Collins gained access to their accounts, downloading e-mails and iCloud backups.[78] In October 2016, Collins was sentenced to 18 months in prison.[79][80]

In August 2016, 28-year-old Edward Majerczyk of Chicago, Illinois agreed to plead guilty to a similar phishing scheme, although authorities believe he worked independently and he was not accused of selling the images or posting them online.[81][82] On January 24, 2017, Majerczyk was sentenced to nine months in prison and was ordered to pay $5,700 in restitution to cover the counseling services of one unnamed celebrity victim.[82]

Emilio Herrera, also from Chicago, had first been named in the press in 2014;[74] he pleaded guilty to one count of unauthorized access to a protected computer to obtain information in October 2017. Herrera had accessed the accounts of unnamed celebrities and others but was not accused of being involved in leaking or sharing the photos and videos he obtained.[83] He was sentenced to 16 months in jail in March 2018.[84]

In April 2018, 26-year-old George Garofano of North Branford, Connecticut pleaded guilty to one count of unauthorized access to a protected computer to obtain information. Garofano's attorney said he had been led into the phishing scheme by criminals.[84] On August 29, 2018, a federal court sentenced Garofano to eight months in prison.[85]

On October 22, 2018, Christopher Brannan, a former Virginia teacher, became the fifth man to be convicted in relation to the hacking. Brannan pled guilty to federal charges of aggravated identity theft and unauthorized access to a protected computer. Through a phishing expedition, he hacked more than 200 people. In addition to his celebrity victims, Brannan targeted his underage sister-in-law, as well as teachers and students at the school he used to teach at.[86] Brannan was sentenced to 34 months in prison on March 1, 2019.[87]

See also

  • Criticism of Apple Inc.

  • Edison Chen photo scandal

  • Imagery of nude celebrities

  • List of "-gate" scandals

  • Sexting


Citation Linkwww.theguardian.comArthur, Charles (September 1, 2014). "Naked celebrity hack: security experts focus on iCloud backup theory". The Guardian. Retrieved September 4, 2014.
Sep 19, 2019, 10:36 PM
Citation Linkwww.washingtonpost.comTerrence McCoy (September 2, 2014). "4chan: The 'shock post' site that hosted the private Jennifer Lawrence photos". The Washington Post. Retrieved September 2, 2014. They quickly spilled to Reddit, where thousands purveyed it under the handle of "the Fappening" — "fap" means to masturbate — before the news reached Buzzfeed and the rest of the viral media gang.
Sep 19, 2019, 10:36 PM
Citation Linkwww.dailymail.co.ukDavid McCormack; Paul Chavez; Zoe Szathmary; Sophie Jane Evans (September 2, 2014). "New wave of leaks target more celebrities as authorities prove unable to stop spread as it emerges naked photos may have been passed around online club for MONTHS". The Daily Mail. Retrieved September 2, 2014. Last night, Reddit users took to a special subsection of the social networking site devoted to the leaks, called Fappening, to discuss the supposed release of a new wave of naked images.
Sep 19, 2019, 10:36 PM
Citation Linkwww.independent.ieLandi, Martin (September 2, 2014). "Stars' nude photo attack may have been down to password codes". Irish Independent. Retrieved September 1, 2014.
Sep 19, 2019, 10:36 PM
Citation Linkwww.ibtimes.co.ukAlistair Charlton (January 2, 2015). "iCloud accounts at risk of brute force attack as hacker exploits 'painfully obvious' password flaw".
Sep 19, 2019, 10:36 PM
Citation Linkwww.apple.com"Apple – Press Info – Apple Media Advisory". Apple Inc. September 2, 2014. Retrieved September 2, 2014.
Sep 19, 2019, 10:36 PM
Citation Linkwww.theverge.com"Apple denies iCloud breach in celebrity nude photo hack". The Verge. Retrieved September 2, 2014.
Sep 19, 2019, 10:36 PM
Citation Linkwww.elle.com.au"The sex crime we need to talk about".
Sep 19, 2019, 10:36 PM
Citation Linkwww.ibtimes.comStone, Jeff (September 8, 2014). "Reddit Fappening Ban Triggers Outraged Response From Nude Photo Distributor".
Sep 19, 2019, 10:36 PM
Citation Linkthenextweb.comWilliams, Owen (September 1, 2014). "This could be the iCloud flaw that led to celebrity photos being leaked". The Next Web. Retrieved September 2, 2014.
Sep 19, 2019, 10:36 PM
Citation Linkwww.wsj.com"Tim Cook Says Apple to Add Security Alerts for iCloud Users". The Wall Street Journal. September 5, 2014. Retrieved September 7, 2014.
Sep 19, 2019, 10:36 PM
Citation Linkgawker.comBiddle, Sam (2016). "Feds Raided Another Chicago Home in Nude Celeb Hack Investigation, Still No Charges Pressed". Gawker. Archived from the original on January 16, 2016. Retrieved January 27, 2016. Cite uses deprecated parameter |deadurl= (help)
Sep 19, 2019, 10:36 PM
Citation Linkgawker.comSargent, Jordan (September 1, 2014). "Is This 4chan Offshoot the Ground Zero for the Leaked Celebrity Nudes?". Gawker. Archived from the original on September 2, 2014. Retrieved September 2, 2014. Cite uses deprecated parameter |deadurl= (help)
Sep 19, 2019, 10:36 PM
Citation Linkwww.independent.co.ukAlexander, Ella (September 1, 2014). "4Chan nude photo hacker disappointed by lack of money earned from naked celebrity leaks: 'I really didn't get close to what I was hoping'". The Independent.
Sep 19, 2019, 10:36 PM
Citation Linkwww.slate.com"Inside AnonIB, Where Hacking Is a Sport and Women's Bodies Are the Prize". Slate. Retrieved September 7, 2014.
Sep 19, 2019, 10:36 PM
Citation Linkwww.independent.co.ukSelby, Jenn (September 1, 2014). "Perez Hilton apologises for Jennifer Lawrence naked photo leak". The Independent.
Sep 19, 2019, 10:36 PM
Citation Linkwww.dailydot.comJaworski, Michelle (September 1, 2014). "Perez Hilton removes 'Celebgate' photos, calling his post a mistake". Daily Dot.
Sep 19, 2019, 10:36 PM
Citation Linkwww.washingtonpost.comDewey, Caitlin (September 5, 2014). "Meet the unashamed 33-year-old who brought the stolen celebrity nudes to the masses". The Washington Post. Retrieved September 12, 2014.
Sep 19, 2019, 10:36 PM
Citation Linkwww.forbes.comWoollacott, Emma (September 8, 2014). "Reddit Gives Mixed Messages After Pulling Leaked Celebrity Photos". Forbes. Retrieved September 10, 2014.
Sep 19, 2019, 10:36 PM
Citation Linkwww.dailydot.comPrice, Rob (September 1, 2014). "Reddit's privacy rules fail as celebrity nudes spread like wildfire". Daily Dot.
Sep 19, 2019, 10:36 PM