Affiliate Disclosure
If you buy through our links, we may get a commission. Read our ethics policy.

Hacker who targeted celebrity Apple and Google accounts sentenced six months in prison

Last updated

An Oregon man who earlier this year pleaded guilty to hacking into Apple and Google email accounts, including a number owned by unnamed celebrities, was sentenced to six months in prison this week.

In February, Andrew Helton pleaded guilty to stealing some 161 personal photos from 13 people after waging a two-year phishing campaign for user credentials, reports Los Angeles Times. U.S. District Judge John A. Kronstadt handed down the sentence on Thursday.

Details of Helton's technique were not disclosed, though prosecutors said victims received account verification emails they believed were from Apple and Google. The messages included a link to a malicious webpage posing as a legitimate account login portal. From 2011 until his arrest in 2013, Helton used the scheme to gain login and password information for 363 email accounts, including prominent individuals in the entertainment industry.

In a court filing seen by ABC News, U.S. Attorney Stephanie S. Christensen said the hacker "targeted, baited, and hooked" strangers, acquaintances and celebrities, with an endgame of gleaning nude and intimate images "for personal use." The pictures never made their way into the public realm, court documents said.

Helton said he regrets his actions, explaining that a bipolar disorder triggered the phishing attack. Court documents show Helton has been in treatment for the mental disorder since his arrest.

Helton's case predates the high-profile iCloud and Google account hack dubbed "Celebgate," so named for the resulting leak of nude photos stolen from celebrities like Jennifer Lawrence and Kate Upton. Two men who pleaded guilty to perpetrating the wide-ranging phishing scheme said they also used phony emails to trick targets into providing login credentials, but for cloud storage services run by Apple and Google.



23 Comments

robertwalter 10 Years · 276 comments

Celebgate... Nobody really called it that except media prudes that couldn't bear to get their heads around calling it "The Fappening"...

jfc1138 13 Years · 3090 comments

Social engineering is close to impossible to stop unless TouchID is the only gateway to anything. . 

mac fan 10 Years · 87 comments

The guy's lucky the judge cut him some slack- six months instead of five years. He should have at least done a year and three years probation.

glynh 13 Years · 133 comments

"Helton said he regrets his actions, explaining that a bipolar disorder triggered the phishing attack. Court documents show Helton has been in treatment for the mental disorder since his arrest."

Like that doesn't sound 'convenient'?

Let's blame a medical condition that you only start treatment for after you have been caught.

He should have got a stronger sentence IMHO. Not much of a disincentive to others is it really...

Rayz2016 9 Years · 6957 comments

glynh said:
"Helton said he regrets his actions, explaining that a bipolar disorder triggered the phishing attack. Court documents show Helton has been in treatment for the mental disorder since his arrest."

Like that doesn't sound 'convenient'?

Let's blame a medical condition that you only start treatment for after you have been caught.

He should have got a stronger sentence IMHO. Not much of a disincentive to others is it really...

That sounds like a rather specific symptom for a bipolar disorder. A bit like me saying I have an eating disorder which only pertains to key lime cheesecake.