Apple admits iCloud attack was the source of celebrity leaks

Over the weekend, celebrities such as Jennifer Lawrence and Kate Upton had private photos leaked online. Now Apple has confirmed speculation that the leak was due to hackers targeting the victims' iCloud accounts:

After more than 40 hours of investigation, we have discovered that certain celebrity accounts were compromised by a very targeted attack on user names, passwords and security questions, a practice that has become all too common on the Internet. None of the cases we have investigated has resulted from any breach in any of Apple’s systems including iCloud® or Find my iPhone.

Of course, whether this constitutes a "breach" or not is a matter of opinion. Apple presumably means that the attackers gained access by correctly guessing the victims' "security questions" rather than employing more technically sophisticated hacking techniques.

But either way, Apple bears some responsibility for these attacks. Security researchers have long known that "security questions" aren't very secure — especially for celebrities whose every personal detail is intensely scrutinized by the public.

Will you join us?

Our biggest supporters are our readers — and we’re so grateful to everyone who has made a contribution during our September campaign. We’re less than 1,000 contributions away from reaching our goal for the month, which in turn will allow us to say yes more often when our incredible journalists come to us with questions they want to answer and projects they want to pursue. Will you make a contribution before the month ends and support our policy coverage through 2024 and beyond?

One-Time Monthly Annual

$5/month

$10/month

$25/month

$50/month

Other

$

Yes, I'll give $5/month

Yes, I'll give $5/month

We accept credit card, Apple Pay, and Google Pay. You can also contribute via