October DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsWindows FixRecommendedWindows errors stealing your time? Find the fix fastScan stability, cleanup and performance issues.Fix NowOctober DealsAmazon USDeal season is back - check today's better picksAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
DocumentaryTube
Admit one · Blog

Fappening 2017: What the Reported Celebrity-Photo Leaks Actually Established

“Fappening 2017” was a search-era label for disputed celebrity-image leak reports, not a proven single breach. Here is what the 2014 prosecutions, 2017 claims, current removal rules, and account-security evidence actually establish.
Opened Runtime11 min Written byDocumentaryTube Team

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Short answer: “Fappening 2017” was a media and search label for alleged celebrity-photo leaks reported mainly in March and August 2017—not a conclusively established single breach. The evidence does not verify one operation, one attacker, or one complete victim list.

The clearest documented explanation comes from prosecutions tied to the earlier 2014 scandal: phishing emails and stolen credentials gave attackers access to individual Apple and Google accounts. Some 2017 allegations were disputed or mischaracterized, so they should not be presented as authenticated images or as proof that Apple suffered a new systemic iCloud breach.

“Fappening 2017” was not one confirmed breach

The phrase Fappening 2017 became a search-era label for a reported resurgence of celebrity-image leaks. Contemporary coverage described alleged new batches in March and August 2017, but the available evidence does not establish one common breach, one perpetrator, or one verified victim list.

That distinction matters. Some reports were disputed, some purported images were described as fake, recycled, misleadingly captioned, or not intimate, and there is no reliable basis for treating every image associated with the label as authentic. Nor does the public record establish that Apple suffered a new systemic iCloud breach in 2017.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
#1 Best Overall
Ailun Privacy Screen Protector iPhone 17e/16e/14/13/13 Pro, 2 Pack
  • [2 Pack] This product includes 2 pack privacy screen protectors.WORKS FOR iPhone 17e/16e/14/iPhone 13/13 Pro 6.1 Inch tempered glass screen protector.Featuring maximum protection from scratches, scrapes, and bumps.[Not for iPhone 16 6.1 inch, iPhone 13 mini 5.4 inch, iPhone 13 Pro Max/iPhone 14 Pro Max/iPhone 14 Plus 6.7 inch, iPhone 14 Pro 6.1 inch]
  • Specialty: to enhance compatibility with most cases, the Tempered glass does not cover the entire screen. HD ultra-clear rounded glass for iPhone 17e/16e/14/iPhone 13/13 Pro is 99.99% touch-screen accurate.
  • 99.99% High-definition clear hydrophobic and oleophobic screen coating protects against sweat and oil residue from fingerprints.
  • High Privacy: Keeps your personal, private, and sensitive information hidden from strangers,screen is only visible to persons directly in front of screen.Good choose when you are in the bus,elevator,metro or other public occasions.(Note: Due to this privacy cover will darken the image to prevent the peeking eyes near you, you might need to turn your device display brightness up a bit when use it.)
  • Online video installation instruction: Easiest Installation - removing dust and aligning it properly before actual installation,enjoy your screen as if it wasn't there.

The strongest evidence concerns the earlier 2014 celebrity-photo scandal and the phishing-based account takeovers later prosecuted in federal court. Those cases show how attackers could obtain access to cloud accounts without a proven compromise of the provider’s core infrastructure. They do not prove that every 2017 allegation came from the same scheme.

The timeline behind the label

Period What the public record supports What remains uncertain
August–September 2014 Large quantities of private celebrity photographs appeared online. Apple said the accounts it investigated had been compromised through targeted attacks on usernames, passwords, and security questions. Apple said it found no breach of iCloud or Find My iPhone systems. The statement did not mean that individual accounts had been secure; it distinguished account compromise from a provider-wide systems breach. [C4]
2016–January 2017 Edward Majerczyk pleaded guilty after using phishing emails and a credential-collection website to access at least 300 victims’ accounts, including approximately 30 celebrities. He received a nine-month prison sentence in January 2017. The Department of Justice said some images were later posted online, but Majerczyk was not accused of posting them. [C5]
March 2017 Reports described a new alleged batch and legal threats from representatives of Amanda Seyfried and Emma Watson. Watson’s representatives disputed that the material attributed to her showed her nude. The reporting therefore cannot be treated as confirmation of every allegation or description. [C1][C2][C3]
April 2017 Commentary emphasized that some material being circulated was fake, misleadingly labeled, or not intimate. The recurrence of online claims did not establish a single new breach or authenticate everything attached to the story. [C1]
August 2017 Additional reports alleged that private celebrity images had circulated online. Coverage was inconsistent about authenticity, source, and whether the material represented hacking, recycled content, or fabrication. [C8]
April 2018 George Garofano pleaded guilty to a phishing scheme that obtained access to approximately 240 Apple iCloud accounts, including many belonging to entertainment-industry members. His prosecution was described by the DOJ as part of the investigation into the 2014 celebrity-photo leaks; it does not by itself verify every 2017 report. [C7]

What the criminal cases actually established

The federal prosecutions provide a clearer account of the mechanism than many of the 2017 headlines. In the documented cases, attackers used social engineering and stolen credentials to enter accounts. The evidence does not require an attacker to break into Apple’s central infrastructure.

Edward Majerczyk: phishing and credential collection

According to the DOJ, Majerczyk sent phishing emails designed to resemble legitimate account-security communications. The messages directed victims to a website that collected their usernames and passwords. Those credentials were then used to access accounts, including accounts belonging to celebrities. The case involved at least 300 victims and approximately 30 celebrity accounts, followed by a nine-month sentence.

This prosecution is important for two reasons. First, it demonstrates how a convincing login request can defeat a password even when the cloud provider itself has not been breached. Second, the DOJ’s account separates unauthorized access from later publication: Majerczyk was not accused of posting the images that were subsequently published. [C5]

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Ryan Collins: access to Apple and Google accounts

Ryan Collins was sentenced to 18 months after admitting that he gained unauthorized access to more than 100 Apple iCloud and Google email accounts. He downloaded victims’ backups and private material. The case reinforces that the risk was not limited to one brand or one cloud product: an attacker who captures a person’s credentials can potentially reach whichever services those credentials unlock.

It also illustrates why “the cloud was hacked” is often an imprecise description. The proven conduct involved unauthorized access to individual accounts rather than a demonstrated provider-wide intrusion. [C6]

Rank #2
SMARTDEVIL 2 Pack Privacy Screen Protector for iPhone 17 Pro Max, Anti-Spy
  • Perfect Fit for iPhone 17 Pro Max:Engineered exclusively for iPhone 17 Pro Max with seamless edge-to-edge coverage, ensuring precise alignment and reliable full-screen protection.
  • Advanced Privacy Protection:Features a 28° privacy filter with smooth 2.5D curved edges, preventing side glances in public. Your screen remains visible only to you—ideal for commuting, traveling, and crowded environments.
  • Effortless Installation:Equipped with an auto dust-elimination tool that delivers a fast, accurate, and bubble-free application, keeping your screen perfectly clear with minimal effort.
  • Military-Grade Protection:Made of nano-reinforced 9H tempered glass, SGS certified. Provides 5X stronger scratch resistance and proven durability, withstanding thousands of pressure and impact tests.
  • Smudge & Fingerprint Resistant:Hydrophobic and oleophobic coating repels fingerprints, sweat, and oil—ensuring your screen stays clean, clear, and smooth to the touch.

George Garofano: a large-scale Apple phishing scheme

Garofano admitted phishing approximately 240 Apple iCloud accounts, including many belonging to entertainment-industry members. The DOJ later described the conduct as part of the investigation into the 2014 celebrity-photo leaks. Again, the established fact is the credential-phishing and account-access scheme—not a single confirmed operation responsible for every image circulated under the 2017 label. [C7]

Why “Fappening 2.0” victim lists are unreliable

Viral lists and reposts tend to combine several different kinds of material:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • authentic material stolen in an earlier incident and recirculated later;
  • images obtained from unrelated breaches or private accounts;
  • ordinary photographs falsely described as intimate;
  • fabricated or digitally altered material;
  • images attributed to the wrong person; and
  • claims repeated so often that repetition is mistaken for verification.

As a result, a person’s appearance on a viral list is not proof that the person was hacked, that the image is genuine, or that the image originated in 2017. Conversely, the absence of a name from a list proves nothing either. Repeating those lists gives unverified allegations additional reach and can harm people who were never victims of the alleged incident.

For the same reason, this article does not identify alleged victims, reproduce descriptions of the material, link to repositories, or provide search instructions. The public-interest issue is unauthorized access and distribution without consent—not the contents of stolen images.

From celebrity scandal to image-based abuse

The more accurate modern framing is nonconsensual intimate-image distribution or image-based abuse. The FTC uses image-based abuse to include real or digitally altered intimate images shared without permission. A person does not consent to publication merely because an image was originally created, stored, or sent privately.

For readers in the United States, the Department of Justice’s Office on Violence Against Women says federal law provides a civil cause of action for sharing intimate images without consent. The law includes statutory exceptions, including good-faith reporting, investigation, legal proceedings, and medical purposes. State criminal laws, filing procedures, deadlines, and available remedies vary, so a victim considering legal action should obtain advice applicable to their state. [C9]

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3
Ailun Privacy Screen Protector for iPhone 16 / iPhone 15 / iPhone 15 Pro
  • [3 Pack] This product includes 3 pack privacy screen protectors.WORKS FOR iPhone 16/iPhone 15/iPhone 15 Pro 6.1 Inch tempered glass screen protector. Due to the rounded edge design of the iPhone 16/iPhone 15/iPhone 15 Pro and to enhance compatibility with most cases,the tempered glass screen protectors will be slightly smaller than the phone screen.[Not for iPhone 16e 6.1 inch, iPhone 15 Plus/iPhone 15 Pro Max/iPhone 16 Plus 6.7 inch,iPhone 16 Pro 6.3 inch,iPhone 16 Pro Max 6.9 inch]
  • Specialty: HD rounded glass for iPhone 16/iPhone 15/iPhone 15 Pro 6.1 Inch is 99.99% touch-screen accurate.
  • 99.99% High-definition hydrophobic and oleophobic screen coating protects against sweat and oil residue from fingerprints. Featuring maximum protection from scratches, scrapes, and bumps.
  • High Privacy: Keeps your personal, private, and sensitive information hidden from strangers,screen is only visible to persons directly in front of screen.Good choose when you are in the bus,elevator,metro or other public occasions.(Note: Due to this privacy cover will darken the image to prevent the peeking eyes near you, you might need to turn your device display brightness up a bit when use it.)
  • Online video installation instruction: Easiest Installation - removing dust and aligning it properly before actual installation,enjoy your screen as if it wasn't there.

What to do if an intimate image is posted without consent

The following steps are aimed at preserving options without spreading the material further. They are general information, not individualized legal advice.

  1. Do not download, forward, repost, or search for additional copies. Sharing the material perpetuates the abuse and may create additional legal and safety problems.
  2. Record the minimum evidence needed. Keep the page address, account name, date and time, and any platform confirmation of a report. If screenshots are necessary for a report or legal consultation, store them privately and do not circulate them.
  3. Use the platform’s nonconsensual-intimate-image reporting process. Under current FTC guidance for covered platforms, a valid removal request should result in removal of the qualifying image and known identical copies within 48 hours. The request should be made through the platform’s designated reporting channel rather than by arguing with the uploader. [C10]
  4. Escalate a broken or ignored process. The FTC says failures involving the required notice-and-removal process can be reported to the agency. Keep the platform’s acknowledgement, rejection, or lack of response as part of the record. [C10][C11]
  5. Consider legal and law-enforcement support. Federal civil remedies and state laws may apply differently depending on the facts and location. A lawyer, victim-support organization, or law-enforcement agency can help determine which route is appropriate.

Commercial removal services should be approached carefully. No service should require a victim to send unnecessary copies of intimate material, promise guaranteed removal from the entire internet, or obscure its fees, privacy practices, geographic coverage, and data-retention policy. Official platform and government reporting routes should be considered first.

What the incident teaches about account security

The practical lesson is not that victims caused the abuse by storing photographs in the cloud. It is that phishing and reused or exposed credentials can let an attacker reach cloud-synced content. Security controls reduce risk, but they cannot change responsibility: the person who steals or distributes private material is responsible for that abuse.

1. Turn on two-factor authentication

Apple advised strong passwords and two-step verification after its 2014 investigation. Today, two-factor authentication adds a second sign-in layer beyond the password. Enable it on the Apple Account, primary email account, and any service that stores sensitive data.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

On a current iPhone or iPad, Apple’s account controls are generally found at Settings > [your name] > Sign-In & Security > Two-Factor Authentication. Labels can vary by operating-system version. Do not approve an unexpected sign-in prompt, and never give a caller or email sender a verification code.

2. Prefer phishing-resistant authentication for high-risk accounts

Apple’s Security Keys for Apple Account feature uses a physical FIDO-certified key as an alternative to six-digit verification codes. Apple specifically positions security keys as protection against targeted attacks, phishing, and social engineering. Apple also requires at least two compatible keys so that losing one does not eliminate the account-recovery option. [C12][C13]

Rank #4
Ailun Privacy Screen Protector+Camera Lens Protector for iPhone 16, 3+3Pack
  • [3+3 Pack] This product includes 3 pack privacy screen protectors and 3 pack camera lens protectors with Installation Frame. Works For iPhone 16 [6.1 inch] tempered glass screen protector and camera lens protector. Featuring maximum protection from scratches, scrapes, and bumps. [Not for iPhone 16e 6.1 inch, iPhone 16 Pro 6.3 inch, iPhone 16 Pro Max 6.9 inch, iPhone 16 Plus 6.7 inch]
  • Night shooting function: specially designed iPhone 16 6.1 Inch camera lens protective film. The camera lens protector adopts the new technology of "seamless" integration of augmented reality, with light transmittance and night shooting function, without the need to design the flash hole position, when the flash is turned on at night, the original quality of photos and videos can be restored.
  • High Privacy: Keeps your personal, private, and sensitive information hidden from strangers, screen is only visible to persons directly in front of screen. Good choose when you are in the bus,elevator,metro or other public occasions. (Note: Due to this privacy cover will darken the image to prevent the peeking eyes near you, you might need to turn your device display brightness up a bit when use it.)
  • Easiest Installation - Please watch our installation video tutorial before installation. Removing dust and aligning it properly with the help of the included installation frame before actual installation, enjoy your screen as if it wasn't there.
  • 99.99% High-definition clear hydrophobic and oleophobic screen coating protects against sweat and oil residue from fingerprints, and enhance the visibility of the screen.

Readers who want a physical layer against this type of credential theft can compare a FIDO security key. Check compatibility with the devices and browsers used to sign in, keep the backup key in a separate secure location, and enroll the keys before an emergency. A security key cannot undo an existing account compromise, remove images already copied elsewhere, or protect an account where the attacker is already authenticated.

3. Use a different, strong password for every service

A unique password limits the damage if one service suffers a credential leak. A reputable password manager can generate and store unique credentials, but it is not a substitute for two-factor authentication and does not make a phishing page legitimate. Enter credentials only after independently opening the service’s official app or typing a known address; do not trust a login link simply because it uses the service’s logo or familiar wording.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

4. Secure the recovery path

Review the recovery email address, trusted phone numbers, signed-in devices, and active sessions for the Apple Account and primary email account. Remove devices or sessions that are unfamiliar, change passwords from a trusted device, and check whether forwarding rules or recovery details were altered. The exact menus differ between Apple, Google, and other providers, but the principle is the same: an attacker who controls the recovery channel may be able to regain access after a password change.

5. Understand Advanced Data Protection’s trade-off

Apple’s Advanced Data Protection for iCloud can place categories including Photos and iCloud Backup under end-to-end encryption. That can reduce what Apple itself can access, but it transfers more recovery responsibility to the account holder. Apple says users need a recovery contact or recovery key because Apple will not possess the keys required to recover that protected data.

Advanced Data Protection also has additional limitations involving web access and some sharing features. Before enabling it, confirm that the recovery contact or key is actually available and that the people who need access can still use the affected services. Encryption does not make phishing harmless: an attacker who obtains valid account access may still be able to use whatever the account permits. The feature is a protection and privacy trade-off, not a guarantee against account takeover. [C14][C15]

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

What can—and cannot—be concluded

  • Supported: phishing and credential theft were established mechanisms in prosecutions arising from the original celebrity-photo scandal.
  • Supported: multiple defendants accessed large numbers of Apple, Google, or other accounts and obtained private material, including photographs and videos.
  • Supported: some stolen material was later published online.
  • Not established: that every image associated with “Fappening 2017” was authentic.
  • Not established: that every person named in online lists was hacked or was depicted in the material.
  • Not established: that all March and August 2017 reports came from one breach, one attacker, or one victim set.
  • Not established: that Apple suffered a new provider-wide iCloud breach in 2017.

Using the label as though it describes a single verified operation turns a messy series of allegations into a certainty the evidence does not support. The responsible account is narrower: the 2017 reports were a reported resurgence amid a wider history of phishing-driven account compromises, disputed material, and nonconsensual distribution.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Sources and scope

This account relies on Apple’s September 2, 2014 investigation statement; federal prosecution records concerning Edward Majerczyk, Ryan Collins, and George Garofano; contemporary 2017 reporting about the disputed allegations; DOJ guidance on the federal civil remedy; and current FTC and Apple guidance on removal requests, account security, Security Keys, and Advanced Data Protection. The available record does not justify reproducing alleged-image links or naming unverified victims.

Frequently Asked Questions

Was iCloud hacked in 2017 because of the Fappening 2.0 reports?

No. Apple’s September 2014 statement said the accounts it investigated were compromised through targeted attacks on usernames, passwords, and security questions, and that it found no breach of iCloud or Find My iPhone systems. The public record reviewed here does not establish a new provider-wide iCloud breach in 2017.

Best Value
Sale
UltraGlass TOP 9H+ Armor for iPhone 17 Pro Max Privacy Screen Protector 6.9
  • 【Industry-Leading 100% Anti-Spy Privacy Protection】Designed for iPhone 17 Pro Max. Larger iPhone screens are easier for others to glance at, so UltraGlass uses patented, SEGI-certified 25° Blackout-3 optical technology to help block side views and keep emails, banking apps, and private content visible only to you—while keeping the front view HD-clear and comfortable through hours of scrolling and streaming.
  • 【Unbreakable TOP 9H+ Glass, the Excellent 2nd Screen for Your iPhone】Boasting unparalleled shatter resistance and durability. And the core excellence is the top 9H+ tempered glass material, which is widely applied in aerospace and military fields for its ① Shatter-proof ② Scratch & Wear Resistance ③ Durability that is 7-8 times higher than other materials. Thus, UltraGlass builds a second tough screen for your iPhone 17 Pro Max.
  • 【Industry NO.1 Military-Grade Shatterproof】Authorized by the International Military Standard with 50+ rigorous engineering tests of 220 lbs impact, 8,000+ drop tests, 25,000+ scratch tests, etc., its strength, toughness and durability perform NO.1 among all glass. By especially breaking the industry's record with a 12ft drop, the iPhone 17 Pro Max screen protector is ensured to be unbreakable from its surface to every edge and corner.
  • 【Invisible Armor, 1:1 Full Covers the iPhone's Screen】Mimicking the iPhone's original screen design, it uses a 1:1 3D curved reinforced black edge that wraps around every curve — case friendly — while securing even the most vulnerable edges. Seamlessly blending with the iPhone 17 ProMax screen, it's virtually invisible and feels like the original screen while offering enhanced full-screen protection.
  • 【0 Bubbles + 0 Dust + 0 Misaligned =100% Successful Installation】Includes everything you need with pioneering automatic positioning, dust removal, and absorption technology, making the installation just effortlessly easy in seconds. No bubbles, no troubles—transforming beginners into experts!

Were all of the celebrity images linked to Fappening 2017 genuine?

No. Reports from March and August 2017 were inconsistent, and some material was disputed, fabricated, recycled, misleadingly captioned, or not intimate. There is no reliable basis for treating every image associated with the label as authentic.

How did the account compromises in the celebrity-photo scandal happen?

The strongest evidence concerns phishing: attackers sent deceptive emails, collected usernames and passwords through imitation login pages, and used those credentials to access accounts. Federal cases involving Edward Majerczyk, Ryan Collins, and George Garofano established this mechanism in connection with the earlier celebrity-photo scandal.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What should someone do if an intimate image is posted without consent?

Do not download or repost the material. Preserve only the minimum information needed for a report, such as the page address and platform account, then use the platform’s intimate-image reporting process. Under current FTC guidance for covered platforms, qualifying content and known identical copies should be removed within 48 hours of a valid request. Broken or ignored processes can be reported to the FTC.

Can a hardware security key prevent this kind of account takeover?

A security key can make phishing-based sign-ins much harder, but it cannot undo an existing compromise or remove copies already distributed. Apple says its Security Keys for Apple Account feature uses compatible physical FIDO-certified keys and requires at least two keys for account-recovery planning.

The Bottom Line

Bottom line: “Fappening 2017” describes a reported series or resurgence of alleged leaks, not a conclusively proven single breach. The best-established mechanism comes from phishing prosecutions tied to the earlier 2014 scandal. Treat viral victim lists and image claims as unverified, do not redistribute the material, use platform and FTC removal procedures when applicable, and protect sensitive accounts with unique passwords, two-factor authentication, and—where practical—phishing-resistant security keys.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Screening Room

  1. Does NEON Have a New Horror Movie It Won’t Show Us? What’s VerifiedAdmit one · BlogDoes NEON Have a New Horror Movie It Won't Show Us? What's VerifiedOpened09 OCT 2026Runtime1 min
  2. What the Official NCIS: Origins Trailer Reveals About Young GibbsAdmit one · BlogWhat the Official NCIS: Origins Trailer Reveals About Young GibbsOpened09 OCT 2026Runtime2 min
  3. What Makes a Translation Great? Ten Literary Translators Weigh InAdmit one · BlogWhat Makes a Translation Great? Ten Literary Translators Weigh InOpened09 OCT 2026Runtime3 min
Recommended PC Tool
Recommended PC Tool
PC Slower Than It Used to Be?Free scan - under a minute
Outdated Drivers Are Slowing You DownFree scan - exact matches

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.