This week George Garofano agreed to plead guilty to computer fraud related to the hacking of 250 iCloud accounts including those of many celebrities including Jennifer Lawrence and Kirsten Dunst. Garofano becomes the fourth person to plead guilty to this crime, joining Emilio Herrera, Edward Majerczyk and Ryan Collins.
While at the initial time that the celebrity photos were stolen from their iCloud and Gmail accounts there were questions about the security of the Cloud and Gmail, eventually it became known that all four hackers used spear phishing emails to their victims posing as as the victims’Internet Service Providers, Apple, Yahoo and Hotmail to trick their victims into providing their user names and passwords to the hackers enabling them to readily access the photos in the Cloud or in their Gmail accounts.
TIPS
There are a number of lessons to be learned from this crime about how to protect our own security.    It is important to resist providing your username and passwords in response to emails and text messages unless you have absolutely and independently confirmed that the request is legitimate, which such requests seldom are.  If you have any concern that such a request might be legitimate, merely call the real company to confirm the legitimacy of the communication.
Also, take advantage of the dual-factor identification protocols offered by Apple and many others.  With dual-factor identification, your password is only the starting point for accessing your account.  After you have inputted your password, the site you are attempting to access will send a special one-time code to your smartphone for you to use to be able to access your account.  In some instances, the companies will only send the code to you if your account is being accessed from a different device than you usually use to access your accounts.  Had Jennifer Lawrence and the other hacked celebrities used dual-factor identification, they would still have their privacy.
It is also important to note that merely because you think you have deleted a photograph or video from your smartphone, that may not be accurate.  Smartphones save deleted photographs and videos on their cloud servers such as the Google+service for Android phones and the iCloud for iPhones.  However, you can change the settings on your smartphone to prevent your photos from automatically being preserved in the cloud.