In late August 2014, a large collection of private photographs belonging to celebrities began appearing across the internet. The images had not been released by the people depicted in them. They had been obtained without their consent through an iCloud security breach and were subsequently circulated across forums, image boards, social-media platforms and file-sharing sites. This incident quickly became known by the internet as “The Fappening” For those who may be unaware, to ‘fap’ means to pleasure oneself.
The term itself reflected the tone of much of the online reaction. Rather than being treated primarily as a major breach of privacy, the incident was rapidly turned into an internet spectacle. Users searched for the stolen photographs, redistributed them and discussed the identities of the people pictured, while websites struggled to keep up with the sheer volume of material being reposted.
Among the most prominent victims were Jennifer Lawrence, Kate Upton, Kirsten Dunst, Scarlett Johansson, and Mary Elizabeth Winstead. For them, the incident was not an internet phenomenon or celebrity controversy. It was the unauthorized disclosure of intensely personal material that had been stored privately, stolen, leaked, and shared around without their consent.
The technical story behind the breach also became a subject of intense scrutiny. Investigators determined that attackers had targeted accounts and obtained private information, prompting renewed discussion about account security, phishing, password practices and the vulnerabilities of cloud-based storage. The incident ultimately became one of the most prominent examples of how compromising a relatively small number of accounts could result in private information being distributed globally within hours. But the technology was on part of the story.
The more expected aspect of this crime was the public reaction. Once the photographs began circulating, removing individual copies became extremely difficult. New versions appeared almost immediately after others were taken down, demonstrating one of the defining characteristics of the modern internet: information can be replicated far faster than it can be removed.
The victims also faced an uncomfortable reversal of responsibility. Instead of the conversation focusing exclusively on the people who had stolen and distributed the photographs, some of the public discussion centered on why the celebrities had taken the photographs in the first place or whether they should have stored them online. These victims were slut shamed, ridiculed, and sexually violated all over again every single time another individual on the internet clicked and viewed their private photographs. Taking a private photograph is not an invitation for someone else to steal it. Storing something on a cloud service does not constitute consent to its public distribution. And the fact that someone is famous does not eliminate their expectation of privacy. Jennifer Lawrence later described the incident in extraordinarily serious terms, calling the unauthorized distribution a “sex crime” and discussing the lasting impact it had on her.
Looking back more than a decade later, “The Fappening” is therefore worth remembering for reasons that go well beyond the photographs themselves. It was a major cybersecurity incident, a landmark example of the permanence and speed of online information, and a revealing moment in the history of internet culture. Most of all, it demonstrated how quickly a serious violation of personal privacy could be transformed into entertainment when thousands of strangers decided that access to something private was more important than the consent of the person who owned it. The name may have sounded like an internet joke. What happened was anything but. This was a serious crime, and a form of sexual assault.