Connecticut Man Sent to Prison for 2014 Celebrity iCloud Hack

iCloud AltConnecticut man George Garafano has been sentenced to eight months in prison for his role in the 2014 iCloud hacks that saw many celebrity photos illicitly shared on the internet.

Garafano was accused of hacking the iCloud accounts of more than 200 people over the course of 18 months, including multiple celebrities.

According to the Hartford Courant, a federal judge in Connecticut ordered the eight month prison term, which will be followed by three years of supervision after release.

Garafano in April pleaded guilty to sending phishing emails to his victims posing as a member of Apple's online security team to obtain usernames and passwords. During the case, prosecutors said he traded the photos that he stole with other hackers and may have sold some of them to earn extra income.

Prosecutors had argued that Garafano should serve 10 to 16 months in prison, while Garafano asked for a more lenient sentence of five months in prison followed by five months in home confinement.

Garafano, who was in college at the time, says he has already suffered for his role in the 2014 hacking event and has "cleaned up his act" since the hacking occurred.

There were a total of four people charged with breaking into the iCloud accounts of celebrities, including Ryan Collins, Edward Majerczyk, and Emilio Herrera, along with Garafano. The other hackers have already been sentenced to prison terms ranging from nine months to 18 months.

When hundreds of nude celebrity photos began leaking online in 2014, there was initial speculation that iCloud had been hacked, but following an investigation, Apple determined that the accounts had been compromised by weak passwords.

Apple has since made improvements to its iCloud security by adding two-factor authentication to iCloud.com, introducing email alerts when an iCloud account is accessed on the web, and requiring app-specific passwords for third-party apps that access iCloud.

Popular Stories

iOS 26

iOS 26.3 and iOS 26.4 Will Add These New Features to Your iPhone

Tuesday February 3, 2026 7:47 am PST by
While the iOS 26.3 Release Candidate is now available ahead of a public release, the first iOS 26.4 beta is likely still at least a week away. Following beta testing, iOS 26.4 will likely be released to the general public in March or April. Below, we have recapped known or rumored iOS 26.3 and iOS 26.4 features so far. iOS 26.3 iPhone to Android Transfer Tool iOS 26.3 makes it easier...
imac video apple feature

Apple Makes Its Second-Biggest Acquisition Ever

Tuesday February 3, 2026 12:45 pm PST by
Apple recently acquired Israeli startup Q.ai for close to $2 billion, according to Financial Times sources. That would make this Apple's second-biggest acquisition ever, after it paid $3 billion for the popular headphone maker Beats in 2014. This is also the largest known Apple acquisition since the company purchased Intel's smartphone modem business and patents for $1 billion in 2019....
iOS 26 Home Feature

Apple Gives Final Warning to Home App Users

Tuesday February 3, 2026 8:55 am PST by
In 2022, Apple introduced a new Apple Home architecture that is "more reliable and efficient," and the deadline to upgrade and avoid issues is fast approaching. In an email this week, Apple gave customers a final reminder to upgrade their Home app by February 10, 2026. Apple says users who do not upgrade may experience issues with accessories and automations, or lose access to their smart...
Apple Logo Zoomed

Tim Cook Teases Plans for Apple's Upcoming 50th Anniversary

Thursday February 5, 2026 12:54 pm PST by
Apple turns 50 this year, and its CEO Tim Cook has promised to celebrate the milestone. The big day falls on April 1, 2026. "I've been unusually reflective lately about Apple because we have been working on what do we do to mark this moment," Cook told employees today, according to Bloomberg's Mark Gurman. "When you really stop and pause and think about the last 50 years, it makes your heart ...
maxresdefault

M5 Pro and M5 Max MacBook Pro Launch Imminent as Reseller Stock Dwindles

Tuesday February 3, 2026 12:12 pm PST by
New M5 Pro and M5 Max MacBook Pro models are slated to launch in the near future, according to information shared with MacRumors by an Apple Premium Reseller. Subscribe to the MacRumors YouTube channel for more videos. The third-party Apple retailer said that MacBook Pro stock is very low currently because there is an imminent new product introduction. Apple typically coordinates supply with...

Top Rated Comments

genovelle Avatar
97 months ago
Why is this called a hack when these people gave them their password. This is why anti-Apple people still try to blame Apple saying they were hacked and leaked the pictures.
Score: 40 Votes (Like | Disagree)
ikir Avatar
97 months ago
anyway the title says “hack” but it was phishing

When hundreds of nude celebrity photos began leaking online in 2014, there was initial speculation that iCloud had been hacked, but following an investigation, Apple determined that the accounts had been compromised by weak passwords ('https://www.macrumors.com/2014/09/02/apple-no-celebrity-icloud-breach/').
Score: 22 Votes (Like | Disagree)
nwcs Avatar
97 months ago
Phishing and social engineering attacks will always succeed in some measure because people are always the weakest links in security.
Score: 14 Votes (Like | Disagree)
keysofanxiety Avatar
97 months ago
MR, please, this isn’t a hack. I know the title will get more visits, but if you use the same password for every account and answer every applelegit@maybenot.com email with your personal details, that’s phishing.

Hack implies Apple’s servers were compromised. There’s a big difference between that and people getting scammed.
Score: 14 Votes (Like | Disagree)
Scottsoapbox Avatar
97 months ago
I feel like 8 months in prison is kind of harsh for getting dumb people to hand over a password.

And PSA for celebrities: don't store your naked pictures in the cloud.
Score: 11 Votes (Like | Disagree)
FFR Avatar
97 months ago
They never mention google or gmail.
Don’t know what’s up with that.

“Prosecutors said in court documents that between November 2012 and September 2014, Collins "knowingly, intentionally, and in furtherance of criminal and tortious acts" accessed at least 50 Apple iCloud accounts and about 72 Google Gmail accounts belonging to more than 100 people. “
Score: 10 Votes (Like | Disagree)