Private photos of more than 100 celebrities were posted online after attackers gained access to their personal cloud accounts. Apple said the accounts had been compromised by a very targeted attack on user names, passwords, and security questions, rather than a breach of its systems.
What happened
- The images began appearing on the image board 4chan and other sites on 31 August 2014.
- Apple and the FBI investigated; Apple said none of the cases resulted from a breach of its iCloud or Find my iPhone systems.
- Apple urged users to adopt strong passwords and enable two-step verification.
- Apple later extended notifications and two-step verification protections for iCloud.
Why it mattered
The incident showed that account security, not just platform security, protects cloud data, and it pushed consumer services towards stronger authentication and alerts. It also highlighted the serious personal harm that can follow when intimate images are stolen and shared.
Lessons for organisations
Organisations should require multi-factor authentication for cloud accounts, avoid easily guessed security questions, and alert users to unusual sign-ins. Staff should be trained to spot phishing attempts aimed at stealing credentials.
Source: The Register
Part of our Top stories archive of headline-making events in information security, privacy, and AI. If you would like help applying the lessons to your organisation, contact us.
