Ryan Collins Gets 18 Months for Celebrity iCloud Hack

Ryan Collins, a 36-year-old man from Lancaster, Pennsylvania, was sentenced today to 18 months in federal prison for hacking into more than 100 Apple and Google email accounts—many belonging to female celebrities in Los Angeles. Collins was taken into custody immediately following sentencing in U.S. District Court in Harrisburg, Pennsylvania, after pleading guilty in May to one count of unauthorized access to a protected computer.

The case traces back to the 2014 ‘Celebgate’ scandal, when private nude photos of numerous female entertainers were leaked online. While investigators found no evidence that Collins was responsible for the actual leaks or that he shared, sold, or uploaded any stolen data, his breach of digital privacy was extensive and systematic. Federal prosecutors emphasized that the crime lies in the unauthorized access itself, not just in how stolen data is used.

From November 2012 through early September 2014, Collins executed a sophisticated phishing operation. He sent emails that appeared to be legitimate messages from Apple or Google, tricking victims into surrendering their usernames and passwords. Once inside the accounts, Collins harvested personal information, including intimate photos and videos. He also deployed software to automatically download entire iCloud backups, vacuuming up years of private digital life.

In some cases, Collins escalated the deception by running a modeling scam, luring victims into sending him nude images under false pretenses. Investigators ultimately identified over 600 victims, with at least 50 iCloud and 72 Gmail accounts compromised. A significant number were tied to women in the entertainment industry, whose private digital spaces were violated without consent.

‘Hackers violate federal law whenever they access private information stored online and in digital devices,’ said Eileen M. Decker, U.S. Attorney for the Central District of California. ‘Today people store important private information online… which is why my office is deeply committed to holding hackers accountable, even when they do not sell or distribute the stolen data.’

Deirdre Fike, Assistant Director in Charge of the FBI’s Los Angeles Field Office, condemned the psychological toll of such intrusions: ‘The defendant intruded into the online accounts of hundreds of victims and in doing so, intruded upon their lives, causing lasting distress.’ The investigation was led by FBI agents in Los Angeles, with Assistant U.S. Attorneys Ryan White and Vicki Chou handling the plea. Prosecution support came from the U.S. Attorney’s Office for the Middle District of Pennsylvania.