Kevin M. Maldonado Pleads Guilty to Hacking 50 Women’s Cloud Accounts

Kevin M. Maldonado, 35, a former Shelby County, Alabama resident now living in North Carolina, has agreed to plead guilty to hacking into the Gmail and cloud storage accounts of at least 50 women to steal personal data, including explicit photographs and videos. Federal prosecutors in Birmingham unsealed the one-count information today, charging Maldonado with unauthorized computer access in furtherance of an invasion of privacy.

The U.S. Attorney’s Office alleges Maldonado gained access to the accounts through a series of phishing attacks, using fake email addresses to impersonate email service administrators. He sent messages to victims claiming their accounts were compromised and demanded login credentials. In other cases, he used open-source intelligence and personal details harvested from victims to answer security questions and reset passwords.

Once inside the accounts, Maldonado downloaded intimate images—photos and videos of victims nude, partially nude, or engaged in sexual activity—and stored them on an external hard drive. He organized and cataloged the stolen data by victim, building a disturbing archive of private moments seized without consent. In at least one instance, he posed as a victim in email correspondence and solicited additional explicit material from the victim’s contacts.

FBI Special Agent in Charge Roger C. Stanton called the breach a stark warning: “This case is a good reminder for all of us to maintain good computer security practices. Always be cautious of unsolicited telephone calls, e-mails and text messages, especially those asking you to supply account information.” He urged anyone suspecting cybercrime victimization to report it immediately to www.IC3.gov.

Acting U.S. Attorney Robert O. Posey emphasized the predatory nature of the crime. “Predators use the internet to target innocent victims,” Posey said. “We continue to work with our law enforcement partners to track and prosecute online criminals, but anyone who has an e-mail or other online account should protect themselves by protecting their login and password information. Don’t share it with friends or acquaintances or respond to unsolicited requests for that, or other personal information.”

Maldonado faces up to five years in federal prison and a $250,000 fine upon sentencing. The FBI led the investigation, and Assistant U.S. Attorney Erica Barnes is prosecuting the case. The plea agreement was filed under seal, but court records confirm Maldonado has admitted to the charge in full.