Timeline of Modern Leaks: from High-Level Intelligence Breaches to Celebrity Scandals
While government intelligence scandals command headlines through national security fallout, high-profile celebrity media breaches highlight consumer-facing security failures. When hundreds of private photographs surfaced across 4chan and Reddit in late 2014, initial reporting pointed to systemic vulnerabilities in Apple's iCloud API. Public speculation assumed a direct cryptographic crack.
The FBI investigation revealed a simpler method. Attackers like Ryan Collins and Edward Majerczyk used spear-phishing campaigns, sending bogus security alerts to targets from addresses like "apple-security@gmail.com". The targets entered their credentials into fake portal pages. The attackers accessed the victim accounts, pulled raw mobile backups, and extracted local image caches without breaching cloud infrastructure.
Subsequent exposures across the entertainment industry throughout 2018, 2024 followed this pattern. Unauthorized SIM swaps, weak security questions, and reused passwords across third-party websites remain the primary drivers. The technical vector rarely requires breaking advanced encryption. It exploits basic gaps in user identity verification.