Illinois man confesses to hacking Snapchat for nude photos

• Svara used social engineering from May 2020 to February 2021, posing as Snapchat support to obtain security codes from 571 women, successfully accessing at least 59 accounts
• He advertised hacking services on Reddit and other forums, offering to provide stolen content 'for you or trade' to clients
• Former Northeastern coach Steve Waithe, who hired Svara, was sentenced to five years in prison in 2024 for schemes targeting 56 women nationally

Summary: Illinois Man Pleads Guilty to Snapchat Hacking Scheme

Key Facts:

Kyle Svara, a 26-year-old Illinois resident, pleaded guilty on February 4 in federal court in Boston to computer fraud and aggravated identity theft charges related to a Snapchat hacking scheme. Between May 2020 and February 2021, Svara used phishing tactics to compromise accounts of nearly 600 women, successfully accessing at least 59 accounts to steal nude and semi-nude photos.

Methodology:

Svara employed social engineering techniques, sending messages posing as Snapchat support to obtain security codes. He received authentication codes from 571 women, allowing him to bypass the platform's security measures and download private images.

Commercial Activity:

Svara monetized his illegal activities by advertising hacking services on Reddit and other online forums, offering to hack Snapchat accounts and provide or trade content. In 2020, he was hired by former Northeastern University track-and-field coach Steve Waithe for $50 to hack accounts of women Waithe knew personally.

Legal Implications:

Under a plea agreement, prosecutors will recommend a three-year prison sentence at Svara's May 18 sentencing hearing. This case emerged from a broader investigation into Waithe, who was sentenced to five years in prison in 2024 for schemes targeting 56 women nationally.

Market Impact:

While this case primarily represents a cybersecurity and criminal matter, it highlights ongoing vulnerabilities in social media platform security and the potential reputational risks for Snap Inc., which operates Snapchat. The incident underscores the importance of robust authentication systems and user education around phishing attempts.