From August 31, 2014 to October 27, 2014, a collection of nearly five hundred sexually explicit private photos and videos were posted online by an anonymous group that called themselves "collectors". The majority of these photos and videos were illegally obtainedsexts from over a hundred female celebrities that showed the womentopless,naked, and/orperforming sexual acts. They were first posted on the imageboard4chan, and then swiftly disseminated by other users on websites and social networks such asImgur andReddit. Internet users and media respondents termed the phenomenon "Celebgate" or, more popularly, "The Fappening".[1]
The images were initially believed to have been obtained via a breach ofApple'scloud services suiteiCloud,[2][3] or a security issue in the iCloudAPI which allowed them to make unlimited attempts at guessing victims' passwords.[4][5] Apple claimed in a press release that access was gained viaspear phishing attacks.[6][7]
The incident was met with varied reactions from the media and fellow celebrities. Critics argued the leak was a major invasion of privacy for the photos' subjects, while some of the alleged subjects denied the images' authenticity. The leak also prompted increased concern from analysts surrounding the privacy and security of cloud computing services such as iCloud—with a particular emphasis on their use to store sensitive, private information.
"The Fappening" is a jocularportmanteau coined by combining the words "fap", aninternet slang term formasturbation, and the title of the 2008 filmThe Happening. Though the term is a vulgarism originating either with the imageboards where the pictures were initially posted or Reddit, mainstream media outlets soon adopted the term themselves, such as theBBC.[8][9] The term has received criticism from journalists likeRadhika Sanghani ofThe Daily Telegraph and Toyin Owoseje of theInternational Business Times, who said that the term not only trivialized the leak, but also, according to Sanghani, "[made] light of a very severe situation." Both articles used the term extensively to describe the event, including in their headlines.[10] "Celebgate" is areference to theWatergate scandal.[11]
The images were obtained via theonline storage offered byApple'siCloud platform for automatically backing up photos fromiOS devices, such asiPhones.[12] Apple later reported that the victims' iCloud account information was obtained using "a very targeted attack on user names, passwords and security questions", such asphishing andbrute-force attack guessing.[6][7][13] It was believed that the images were obtained using an exploit in theFind My iPhone service.[12] Court documents from 2014 indicated that one user created a fake email account called "appleprivacysecurity" to ask celebrities for security information.[14] The photos were being passed around privately for at least a couple of weeks before their public release on August 31. Some anonymous imageboard users at the time claimed that unreleased photos and videos exist.[15]
The hacker responsible for the leak, who described themselves as being a "collector", distributed the leaked images on theimage boards4chan and Anon-IB in exchange forBitcoin.[16][17] Ultimately, the images were widely circulated online via other channels, includingImgur andTumblr. Celebrity gossip bloggerPerez Hilton also re-posted some of the photos on his blog, but soon took them down and issued an apology, saying he had "acted in bad taste".[18][19]
A major center of activity was the link-sharing websiteReddit,[20] where a subreddit,/r/TheFappening, was created for sharing the photos;[21] in a single day, it amassed over 100,000 followers. Reddit administrators were criticized for allowing this to take place in an alleged violation of their anti-doxing rules.[22][23] AsMcKayla Maroney claimed to be under 18 at the time the photos of her were taken, Reddit staff took photos of her down and warned that anyone re-posting them, or underage photos ofLiz Lee which had been circulating prior to this incident, would be permanently banned from the site and could be prosecuted for distributingchild pornography.[24] On September 7, citing copyright issues, Reddit banned /r/TheFappening,[21][25] also saying the workload of dealing with them had become too much.[26] Reddit banned another subreddit named "Fappening" on the same day.[25]
The original release contained photos and videos of more than 100 individuals that were allegedly obtained fromfile storage on hacked iCloud accounts,[27] including some the leakers claimed wereA-list celebrities.[28] Shortly after the photos were leaked, several affected celebrities issued statements either confirming or denying the photos' authenticity.[29] Celebrities who confirmed the photos' authenticity includeJennifer Lawrence (confirmed by her publicist),[30]Kate Upton and her husbandJustin Verlander (confirmed by Upton's lawyer),[31][32][33]Mary Elizabeth Winstead (confirmed viaTwitter),[34][35]Kaley Cuoco (confirmed via Instagram),[36][37] andKirsten Dunst, who also criticized the iCloud service.[38] SingerJill Scott confirmed on Twitter that one of the leaked photos was of her while stating that another was fake.[39] The perpetrators usedElcomSoft tools to download iCloud backups from Apple.[40][41][42]
Celebrities who denied the photos' authenticity includeAriana Grande[43][44] andYvonne Strahovski.[45] Olympic gymnastMcKayla Maroney denied the images' authenticity on Twitter,[46][47] but later confirmed the photos were legitimate while also saying she was underage when they were taken.[24]Victoria Justice denied the photos were authentic but later stated on Twitter that she was pursuing legal action and found the leak to be a massive invasion of not just her privacy, but of the privacy of all celebrities affected by the incident.[43][48] Reports in October indicated thatNick Hogan was the first male star to be directly targeted by hackers, though he denied the pictures' authenticity.[49]
According to security expertNik Cubrilovic, in addition to the photographs, other personal information such as text messages, calendars, address books, phone call logs and any other data stored on their phones and backed up to the service were also likely stolen.[50][51]
On September 20, 2014, a second batch of similar private photos of additional celebrities was leaked by hackers.[52] On September 26, 2014, a third batch was also leaked, which was dubbed "The Fappening 3".[53][54] Then a fourth and fifth batch was leaked in early and late October 2014.[55][56][57][58]
ActressLena Dunham pleaded on Twitter for people not to view the photos, arguing that in doing so "you are violating these women over and over again. It's not okay."[59] ActressEmma Watson condemned not only the leak but "the accompanying comments [on social media] that show such a lack of empathy."[60] ActorsSeth Rogen andLucas Neff also spoke out against the hackers and people who posted the pictures.[61] Justin Verlander, then a pitcher for theDetroit Tigers, told the media prior to a game against theCleveland Indians that he keeps his private life private and would rather focus on the Tigers' race with theKansas City Royals for theAL Central title than be a distraction to his teammates.[62] Security analysts have stated that the breach could have been prevented through the use oftwo-factor authentication,[63] while aForbes writer recommended completely shutting down the iCloud "Photo Stream" feature (which automatically uploads photos taken with aniOS device to iCloud servers).[64]
Apple CEOTim Cook (pictured in 2017) announced the company would increase security for iCloud.
In an interview withThe Wall Street Journal, Apple CEOTim Cook stated that in response to the leak, the company planned to take additional steps to protect the privacy and security of iCloud users in the future.[13] Notifications will be provided whenever data is restored to a device via iCloud and after logging into iCloud via a web browser,[65] in addition to existing notifications when a user's iCloud password is changed. Additionally, Apple will broaden and encourage the use oftwo-factor authentication in future versions of its software and operating systems, such as the then-upcomingiOS 8. In conclusion, he emphasized that "we want to do everything we can do to protect our customers, because we are as outraged if not more so than they are".[13]
Jennifer Lawrence contacted authorities and her publicist stated that the authorities would prosecute anyone who posted leaked images of her.[66]Forbes columnist Joseph Steinberg questioned whether the reactions by law enforcement and technology providers indicated that celebrities were being treated differently from ordinary Americans, which, in the case of law enforcement, may be illegal.[67]
On October 1, 2014,Google was threatened with a $100 million lawsuit by lawyer Martin Singer on behalf of unnamed victims of the leak, alleging that Google had refused to respond to requests for the images to be removed from its platforms (includingBlogger andYouTube), "[failing] to act expeditiously, and responsibly to remove the images", and "knowingly accommodating, facilitating, and perpetuating the unlawful conduct".[68][69]
In an interview withVanity Fair, victim Jennifer Lawrence called the leak a "sex crime" and a "sexual violation"; she added, "Anybody who looked at those pictures, you're perpetuating a sexual offense. You should cower with shame."[70] This view was contrasted by another victim of the leak,Emily Ratajkowski, who toldGQ, "A lot of people who were victims of [the hack] said anyone who looks at these pictures should feel guilty, but I just don't think that's fair", and "I'm not sure that anyone who Googles it is necessarily a criminal. I think the people who stole the photos are".[71]
TheFederal Bureau of Investigation said it was "aware of the allegations concerning computer intrusions and the unlawful release of material involving high profile individuals, and is addressing the matter".[72] Similarly, Apple stated that it had been investigating whether a security breach of the iCloud service was responsible for the leaked photographs, as per the company's commitment to user privacy.[63][73] On September 2, 2014, Apple reported that the leaked images were the result of compromised accounts, using "a very targeted attack on user names, passwords and security questions, a practice that has become all too common on the Internet".[6][7]
In October 2014, the FBI searched a house inChicago, Illinois, and seized several computers, cellphones and storage drives after tracking the source of a hacking attack to an IP address linked to an individual named Emilio Herrera. A related search warrant application mentioned eight unidentified high profile victims. According to law enforcement officials, Herrera was just one of several people under investigation and the FBI carried out various searches across the country.[74][75]
In March 2016, 36-year-old Ryan Collins ofLancaster, Pennsylvania, agreed to plead guilty to one count of unauthorized access to a protected computer to obtain information resulting in an 18-month sentence.[76] While no victims were named in the court documents, numerous media outlets connected Collins' case to the breach. During the investigation, it was found that Collins phished by sending e-mails to the victims that looked like they had been sent by Apple or Google, warning the victims that their accounts might be compromised and asking for their account details. The victims would enter their passwords, and Collins gained access to their accounts, downloading e-mails and iCloud backups.[77] In October 2016, Collins was sentenced to 18 months in prison.[78][79]
In August 2016, 28-year-old Edward Majerczyk of Chicago, agreed to plead guilty to a similar phishing scheme, although authorities believe he worked independently and he was not accused of selling the images or posting them online.[80][81][82] On January 24, 2017, Majerczyk was sentenced to nine months in prison and was ordered to payUS$5,700 (equivalent to $7,312 in 2024) in restitution to cover the counseling services of one unnamed celebrity victim.[82]
Emilio Herrera, also from Chicago, had first been named in the press in 2014;[74] he pleaded guilty to one count of unauthorized access to a protected computer to obtain information in October 2017. Herrera had accessed the accounts of unnamed celebrities and others but was not accused of being involved in leaking or sharing the photos and videos he obtained.[83] He was sentenced to 16 months in jail in March 2018.[84]
In April 2018, 26-year-old George Garofano ofNorth Branford, Connecticut, pleaded guilty to one count of unauthorized access to a protected computer to obtain information. Garofano's attorney said he had been led into the phishing scheme by criminals.[84]On August 29, 2018, a federal court sentenced Garofano to eight months in prison.[85]
On October 22, 2018, Christopher Brannan, a former Virginia teacher, became the fifth man to be convicted in relation to the hacking. Brannan pled guilty to federal charges of aggravated identity theft and unauthorized access to a protected computer. Through a phishing expedition[further explanation needed], he hacked more than 200 people. In addition to his celebrity victims, Brannan targeted his underage sister-in-law, as well as teachers and students at the school where he used to teach.[86] Brannan was sentenced to 34 months in prison on March 1, 2019.[87]
^Clare, Emma (February 19, 2015)."'Porn stars' against their will".Dagens Næringsliv.Archived from the original on January 25, 2023. RetrievedApril 14, 2023.Nude photos are stolen, leaked and posted on the internet. Revenge porn is the newest way to destroy someone's life.
^Rogers, Christopher (September 28, 2014)."The Fappening 3: Alleged Nude Pics Released Of Kelli Garner, Brooke Burns & More".Hollywood Life. Archived fromthe original on November 11, 2014. RetrievedSeptember 17, 2023.Is there no end in sight? A new batch of alleged nude and compromising photos have leaked online in a third attack, dubbed as 'The Fappening 3,' on some of our favorite celebrities, including Anna Kendrick, Brooke Burns and Jennifer Lawrence.
.jpg)
_(cropped).jpg)