PCMag editors select and review products independently. If you buy through affiliate links, we may earn commissions, which help support our testing.

Apple: No iCloud, Find My iPhone Breach in Celeb Photo Hack

 & Chloe Albanesius Executive Editor, News

Our team tests, rates, and reviews more than 1,500 products each year to help you make better buying decisions and get more from technology.

Our Expert
LOOK INSIDE PC LABS HOW WE TEST
65 EXPERTS
43 YEARS
41,500+ REVIEWS

Apple today said that the hack of celebrity photos did not include a breach of iCloud or Find My iPhone.

Instead, "certain celebrity accounts were compromised by a very targeted attack on user names, passwords, and security questions, a practice that has become all too common on the Internet," Apple said in a statement.

"None of the cases we have investigated has resulted from any breach in any of Apple's systems including iCloud or Find my iPhone," according to the company.

Cupertino said it came to this conclusion after "more than 40 hours of investigation," and is working with law enforcement officials to track down the hackers.

"When we learned of the theft, we were outraged and immediately mobilized Apple's engineers to discover the source," Apple said in its statement. "Our customers' privacy and security are of utmost importance to us."

Going forward, Apple encouraged users to "always use a strong password and enable two-step verification."

Apple's statement comes after a hacker on Sunday posted dozens of photos featuring nude celebrities on the Internet. The photos appeared to have come from the actresses' phones, and in the immediate aftermath, there were questions about whether the hackers had obtained the photos via a hack of iCloud.

A number of sites noted that a bug within Find My iPhone was revealed just one day before the photo leak. Apparently, Find My iPhone did not use bruteforce protection, allowing hackers to guess different passwords without being locked out. Ultimately, the so-called iBrute bug was patched shortly before the leak.

For more, check out Two-Factor Authentication: Who Has It and How to Set It Up and our roundup of The Best Password Managers.

The individual or group behind the celeb leaks could face some serious time behind bars if uncovered. In 2012, a Florida man was sentenced to 10 years in federal prison for hacking into email accounts belonging to actresses Scarlett Johansson and Mila Kunis, singer Christina Aguilera, and other celebrities.

Check out PCMag What's New Now in the video below for more.

About Our Expert

Chloe Albanesius

Chloe Albanesius

Executive Editor, News

My Experience

I started out covering tech policy in DC for The National Journal, where my beat included state-level tech news and all the congressional hearings and FCC meetings I could handle. I later covered Wall Street trading tech before switching gears to consumer tech. I now lead PCMag's news coverage.

My Areas of Expertise

Getting my start in DC means I still have a soft spot for tech policy; Congressional hearings can sometimes be as entertaining as a Bravo reality show, for better or worse. But PCMag is all about the technology we use every day, as well as keeping an eye out for the trends that will shape the industry in the years ahead (or flop on arrival). I've covered the rise of social media, the iOS vs. Android wars, the cord-cutting revolution that's now left us with hefty streaming bills, and the effort to stuff artificial intelligence into every product you could imagine. This job has taken me to CES in Vegas (one too many times), IFA in Berlin, and MWC in Barcelona. I also drove a Tesla 1,000 miles out west as part of our Best Mobile Networks project. Of late, my focus is on our hard-working team of reporters at PCMag, guiding and editing their robust coverage.

Read full bio