Jennifer Lawrence photo hack: Apple admits some stars' accounts compromised

Apple said Tuesday that hackers obtained nude photos of Jennifer Lawrence and other female celebrities by pilfering images from individual accounts rather than through a broader attack on the company's services.

Meanwhile, numerous sharing sites removed images of the stars apparently in response to copyright complaints.

• Nude celebrity photo leak casts iCloud over Apple launch
• #LeakforJlaw: 4Chan pranksters encourage women to tweet nude photos in support of Lawrence
• Celebrities bash mass privacy violation
• Jennifer Lawrence among nude-photo leak victims
• Read about other celebrities who have been stung by hackers

However, experts say there is no way to fully scrub the photos from the internet and the images could keep popping up in the future, forcing celebrities to file repeated complaints as they play a cyber-version of the arcade game "whack-a-mole."

Apple said its engineers have determined that hackers breached individual accounts and didn't obtain general access to a pair of the company's services — iCloud and Find my iPhone. The tech giant said it released the results after conducting 40 hours of investigation.

Law enforcement inquiries likely will take days or weeks to complete.

'Digital trail' exists

The FBI offered no details on its efforts to identify people responsible for stealing the images that were posted on image-sharing site Imgur.com, the social networking sites Reddit and Twitter, and other websites. But the agency said Monday it was aware of the breach and addressing the matter.

Similar investigations have involved the use of search warrants and digital forensics to determine how hackers obtained everything from Paris Hilton's contact list to nude photos of actresses Scarlett Johansson and Mila Kunis.

By Tuesday, a Reddit thread that had been compiling links to images of nude photos of Lawrence and other celebrities had been disabled due to a copyright claim, the website said.

Users reported difficulty finding working links to the images on other sites.

Representatives of Twitter, Reddit and Imgur did not respond to messages seeking comment.

Apple Inc. said it was co-operating with the FBI and urged users to adopt stronger passwords and enable a two-step authentication feature to prevent data thefts.

Naked images purported to be of other stars also were posted, although the authenticity of many couldn't be confirmed.

Mark Rasch, a former federal prosecutor who specialized in computer crimes, said investigators will focus on who's responsible for the theft of the photos, the tools they used, and the idiosyncrasies of how they program.

"There is a digital trail," Rasch said. "What you hope for (is) the people aren't very good at what they do, that they screw up, that they (upset) other hackers. Or that they leave a trail."

Rasch said authorities will sometimes catch an early break or get a tip that leads them to suspects. The investigations are difficult, he said, but "It's equally difficult to get away with it scot free."

'It's likely to pop up somewhere else'

In the past decade, federal prosecutors have successfully prosecuted a Massachusetts teenager who hacked Hilton's phone account and posted her contact list online. The teenager was sentenced to several months in jail.

Christopher Chaney, a Florida man, was ordered by a federal judge in 2012 to be imprisoned for 10 years for the hack that targeted Johansson.

The people responsible for stealing the Lawrence photos might also be tracked by private investigators who can operate faster than government agents, said Rasch, whose company Rasch Technology and Cyberlaw has conducted similar investigations but is not working on the current data breach.

"Even if you can get it taken down, it's likely to pop up somewhere else," said F. Jay Dougherty, a law professor at Loyola Law School Los Angeles who specializes in entertainment and intellectual property issues.

Mickey Osterreicher, a media lawyer and general counsel for the National Press Photographers Association, said a successful copyright complaint could scrub the images from a site forever, but Lawrence and other celebrities will have to remain vigilant and keep filing takedown notices.

"You have to go to each place," he said. "It's kind of like playing whack-a-mole."

'Flagrant violation of privacy'

A 4chan user began posting the images, which included nude photographs of Lawrence, Sports Illustrated model Kate Upton, and other movie and television personalities, shortly after 4 p.m. ET Sunday.

Lawrence contacted authorities after the images began appearing Sunday.

Naked images purporting to be of other female stars were also posted, although the authenticity of many couldn't be confirmed. The source of the leak was unclear.

"This is a flagrant violation of privacy," Lawrence's publicist, Liz Mahoney, wrote in a statement. "The authorities have been contacted and will prosecute anyone who posts the stolen photos of Jennifer Lawrence."

Knowing those photos were deleted long ago, I can only imagine the creepy effort that went into this.—Actress Mary Elizabeth Winstead

Actor Mary Elizabeth Winstead also confirmed that nude photos of her were posted online.

"To those of you looking at photos I took with my husband years ago in the privacy of our home, hope you feel great about yourselves," Winstead posted on Twitter. Winstead, who starred in Final Destination 3 and Abraham Lincoln: Vampire Hunter, wrote that she thought the images had been destroyed.

"Knowing those photos were deleted long ago, I can only imagine the creepy effort that went into this," Winstead wrote.

How widespread the hacking of celebrity photos was is not immediately clear. Some of the images were quickly denounced as fakes.