LOS ANGELES
An Oregon, man who admitted hacking and getting 448 usernames and passwords for about 363-e-mail accounts, including victims who were members of the entertainment industry in Los Angeles, was sentenced Thursday to a year in prison, officials announced.
By illegally accessing the e-mail accounts, Andrew Helton obtained 161 sexually explicit, nude and/or partially nude images of approximately 13 victims, some of whom were celebrities, officials said.
Helton, 29, of Portland, plead guilty to a felony violation of the Computer Fraud and Abuse Act, specifically a charge of unauthorized access to a protected computer to obtain information.
U. S. District Judge John A. Kronstadt also ordered Helton to pay a $3,000 fine, according to authorities.
“For over two years, Helton targeted unsuspecting victims with phishing e-mails that gave him full access to their private e-mail accounts,” said U.S. Attorney Eileen M. Decker. “He systematically searched for and stole intimate images and stored them in his own computer for personal use, which meant the victims continued to suffer as a result of his voyeurism. Helton’s crime was a deep invasion of privacy that caused real harm.”
In the scheme, Helton sent fraudulent e-mails that resembled legitimate e-mails from Apple or Google to hundreds of victims asking them to “verify” their accounts.
Helton sent the phishing e-mails to acquaintances, strangers, and celebrities living in the Los Angeles area.
When victims clicked on the link provided, they were taken to bogus websites resembling Apple or Google log-in pages, where they were prompted to enter their usernames and passwords. After that, Helton had full access to their accounts.
After gaining access to the victims’ accounts, Helton scoured their e-mails and found 161 sexually explicit, nude and/or partially nude images of approximately 13 victims, which included some celebrities. Helton saved these images to his personal computer.
“Whether a victim of cyber intrusion is a celebrity or not, the lasting distress resulting from the privacy violation is the same,” said Deirdre Fike, the Assistant Director in Charge of the FBI’s Los Angeles Field Office. “The FBI reminds users of computers and personal devices to report suspicious activity toic3.gov and to protect their private information by verifying the authenticity of websites before providing personal data online.”
Helton was ordered to begin serving his prison sentence by Oct. 11.
The FBI investigated this case.