Privacy Ninja

iCloud Hacker Gets 9 years in Prison for Stealing Nude Photos

iCloud Hacker Gets 9 years in Prison for Stealing Nude Photos

A California man who hacked thousands of Apple iCloud accounts was sentenced to 8 years in prison after pleading guilty to conspiracy and computer fraud in October 2021.

Starting from as early as September 2014, 41-year-old Hao Kuo Chi from La Puente, California, started marketing himself as “icloudripper4you,” someone capable of breaching iCloud accounts and stealing anything contained in the linked iCloud storage (in what he referred to as “ripping”).

“This man led a terror campaign from his computer, causing fear and distress to hundreds of victims,” FBI agent David Walker said.

“The FBI is committed to protecting the American people by exposing these cybercriminals and bringing them to justice.”

Also Read: Browser in the browser attacks: Why you should watch out

To compromise a targeted account, Chi used emails that would allow him to impersonate Apple customer support representatives and trick targets into handing over their Apple IDs and passwords, according to court documents.

After compromising an iCloud account, he would look for and steal nude photographs and videos from victims’ online storage (referred to as “wins”), sharing them with conspirators who later published them online.

Chi also shared some of the compromising photos and videos on a now-defunct revenge porn website (Anon-IB) without his victims’ consent and intending “to intimidate, harass, or embarrass.”

Hundreds of compromised iCloud accounts

Until caught, Chi gained unauthorized access to hundreds of targets’ iCloud accounts from all over the United States, including Arizona, California, Florida, Kentucky, Louisiana, Maine, Massachusetts, Ohio, Pennsylvania, South Carolina, and Texas.

Also Read: Cybersecurity for SMEs: What employees should know

“Chi’s email accounts contained the iCloud credentials of approximately 4,700 victims. These accounts also revealed that he had sent content stolen from victims to conspirators on more than 300 occasions,” the Department of Justice revealed today.

He stored 3.5 terabytes of stolen content from over 500 victims on cloud and physical storage, with roughly 1 terabyte of the cloud storage dedicated to stolen nude photographs and videos.

“Chi victimized hundreds of women across the country, making them fear for their safety and reputations,” said U.S. Attorney Roger Handberg.

“This sentence reflects the resolve of the U.S. Attorney’s Office to hold cybercriminals responsible for their crimes.”



Subscribe to our mailing list to get free tips on Data Protection and Data Privacy updates weekly!

Personal Data Protection


We have assisted numerous companies to prepare proper and accurate reports to PDPC to minimise financial penalties.


Click one of our contacts below to chat on WhatsApp

× Chat with us