Loading story…
An Illinois man, Kyle Svara, pleaded guilty in federal court to charges tied to a campaign targeting roughly 570–600 women whose Snapchat accounts were accessed to steal nude or semi-nude images. Reporting indicates Svara used social engineering—impersonating Snapchat/Snap representatives and soliciting security access codes via text—to harvest credentials at scale (including outreach to thousands of targets), then unlawfully accessed at least 59 accounts to download private photos that he kept, sold, or traded online. He also advertised paid account-compromise “services” on online platforms and directed prospective clients to contact him via the encrypted messaging app Kik.
Court reporting also links Svara’s activity to Steve Waithe, a former Northeastern University track and field coach who hired Svara to compromise accounts of students and athletes; Waithe was previously convicted and sentenced to prison for related cyber-enabled abuse. Svara additionally targeted victims in Plainfield, Illinois, and at Colby College in Maine, and he faces charges including aggravated identity theft, wire fraud, computer fraud, and false statements tied to a child pornography-related investigation; U.S. authorities have encouraged potential victims to come forward. Separately, an unrelated case in New York described the arrest of an alleged 764 affiliate on CSAM charges, reflecting broader law-enforcement activity against that violent extremist network but not connected to the Snapchat hacking case.
See the reporting duties and controls this puts on the clock.
5 events from the most recent confirmed update back to the earliest known activity.
On or before February 6, 2026, Kyle Svara, 27, of Oswego, Illinois, pleaded guilty to multiple federal charges tied to the Snapchat account-hacking campaign. The FBI and U.S. Department of Justice also urged additional potential victims to come forward.
Investigators said Svara initially made false statements about aspects of his conduct when questioned by authorities. This became part of the federal case against him.
A related case involving former Northeastern University coach Steve Waithe resulted in his conviction and prison sentence for conduct tied to the hacking services Svara provided. The references cite this as an already completed law-enforcement outcome connected to the broader scheme.
Authorities said Svara marketed and sold his account-hacking services to others, including former Northeastern University track and field coach Steve Waithe. This linked his activity to broader abuse of compromised Snapchat accounts and stolen intimate images.
Kyle Svara conducted a social-engineering scheme in which he impersonated a Snapchat representative to trick women into providing security access codes. Prosecutors said the campaign targeted nearly 600 women's Snapchat accounts and enabled theft of nude or semi-nude images that were later sold and traded online.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See what this changes for your reporting obligations and which controls it puts on the clock.
2 references tracked. Mallory keeps watching after this page renders.
therecord.media
Open sourcebleepingcomputer.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
An Illinois man, Kyle Svara, was sentenced to 76 months in prison and three years of supervised release after pleading guilty to identity theft and wire fraud in a scheme that compromised hundreds of Snapchat accounts belonging primarily to women. Prosecutors said Svara impersonated Snap Inc. representatives, used anonymized phone numbers, and socially engineered victims into revealing Snapchat access codes between May 2020 and February 2021, targeting more than 4,500 people and unlawfully accessing about 517 accounts. Authorities said Svara stole nude or semi-nude images from more than 750 women, enabled two-factor authentication on some accounts to lock victims out, and advertised account-hacking services online while communicating with clients over Kik. Investigators also found child sexual abuse material in his Mega account and said he collected, distributed, and solicited CSAM; court records further tied his services to former Northeastern University coach Steve Waithe, who was previously sentenced for hiring Svara to hack students’ Snapchat accounts.
Jul 25, 2026
UK authorities said Justin Swaddle, a 20-year-old from Leeds linked to the online collective known as **The Com**, was sentenced to two years in prison for blackmail, sextortion, and child sexual abuse offences against **117 female victims worldwide**. Investigators said Swaddle, who offended while aged 17, used aliases including **"Epstein," "Rugen," and "Moscow"** on Snapchat, Telegram, and Discord to groom and coerce girls aged 13 to 17 into producing sexual images and videos, and in some cases into acts of self-harm, while threatening to expose them to parents or schools. The UK National Crime Agency said it took over the investigation in January 2024 and recovered evidence from seized devices showing indecent images of children, extortion, and material depicting victims carving his aliases into their skin. Eight victims were identified in the UK, with additional victims located through cooperation with law enforcement in the United States, Canada, Australia, Norway, and New Zealand. Swaddle pleaded guilty at Leeds Crown Court and was also made subject to a **10-year Sexual Harm Prevention Order** and placement on the **Sex Offenders Register**, as authorities highlighted the case as part of wider scrutiny of The Com over sextortion, child exploitation, and related cyber-enabled abuse.
Aug 10, 2026
U.S. prosecutors charged **Kwamaine Jerell Ford**, a 34-year-old Georgia man, with running a long-term social-engineering and account-takeover scheme that targeted **NBA and NFL players** by stealing their **Apple/iCloud credentials** and, in some cases, **multifactor authentication codes**. According to the indictment described by multiple reports, Ford allegedly impersonated a well-known adult film actress on social media to lure athletes into sharing access to their accounts, then used stolen financial and personal data to conduct unauthorized purchases and other fraud. Authorities say the activity ran from **November 2020 through September 2024**, involved more than **2,000 unauthorized transactions**, and led to charges including wire fraud, computer fraud, access device fraud, aggravated identity theft, and sex trafficking; Ford has pleaded **not guilty** and is being held without bail. The case is notable because prosecutors say Ford resumed similar criminal activity while still serving a sentence for an earlier phishing campaign that had also targeted athletes and celebrities. One report says evidence from seized devices showed he began phishing professional athletes again within days of being released to home confinement during the pandemic, while another says some of the alleged conduct occurred while he was still in federal prison. Prosecutors also allege the scheme escalated beyond financial theft: Ford is accused of coercing a woman into sexual encounters with several players, recording hidden videos, and hacking at least one victim's home security cameras. The reporting consistently portrays the operation as a repeat-offender **credential theft and fraud campaign** centered on compromised Apple accounts and social-engineering of high-profile sports figures.
Jun 29, 2026