An Illinois man has pleaded guilty to a series of federal crimes connected to a widespread hacking operation that compromised the Snapchat accounts of hundreds of women and girls, exposing private images and personal information.
Kyle Svara, 27, of Oswego, Illinois, entered guilty pleas to multiple charges, including aggravated identity theft, wire fraud, computer fraud, conspiracy to commit computer fraud, and making false statements related to child sexual abuse material. Federal prosecutors say the case centers on a calculated campaign that relied on deception and manipulation to gain access to victims’ private social media accounts.
Svara is scheduled to be sentenced on May 18. If the court imposes the maximum penalties tied to the charges, he could face a combined sentence of up to 32 years in federal prison.
Impersonation Tactics Used to Breach Accounts
Investigators say the hacking operation primarily took place in 2020 and 2021. During that time, Svara allegedly pretended to be a representative from Snapchat and contacted approximately 570 women. By presenting himself as a company official, he persuaded many of them to share security verification codes that were automatically generated after he attempted to log into their accounts.
Those codes enabled him to bypass account protections and gain unauthorized access to at least 59 Snapchat profiles. Once inside, prosecutors say he downloaded sensitive personal content, including nude and semi-nude photographs stored in private messages and cloud backups. Authorities allege that he later sold these images online and exchanged them with others through internet forums.
The case highlights the effectiveness of social engineering, a method in which attackers manipulate people into revealing confidential information. Rather than relying on sophisticated software exploits, the scheme depended heavily on convincing victims to trust a false identity and surrender access credentials.
Offering Hacking Services to Paying Customers
According to court records, Svara did not limit his activities to personal hacking attempts. Investigators say he actively advertised his skills online and offered paid services to individuals seeking unauthorized access to Snapchat accounts. He allegedly promoted himself on internet platforms as someone capable of breaking into private accounts for a fee.
One of his clients was Steve Waithe, a former track and field coach at Northeastern University. Prosecutors say Waithe hired Svara to infiltrate the Snapchat accounts of women connected to the university’s athletic program, as well as other women he knew personally. Waithe was later convicted of wire fraud and cyberstalking and received a five-year prison sentence.
Authorities believe Svara accepted hacking requests from several other customers in addition to conducting his own independent targeting. Investigators say he focused on women and girls in certain communities, including Plainfield, Illinois, and students associated with Colby College in Waterville, Maine.
Investigation Complicated by False Statements
When law enforcement officials first questioned Svara about his activities, prosecutors say he provided misleading information. He initially denied accessing or distributing child sexual abuse material, statements that later became part of the criminal case against him.
The FBI and the U.S. Department of Justice have encouraged anyone who believes they may have been affected by the hacking operation to contact authorities. Identifying and supporting victims remains an ongoing priority as investigators continue to assess the full impact of the breaches.
Part of a Broader Crackdown on Digital Exploitation
The case against Svara comes as federal authorities intensify efforts to combat cybercrimes that target women, students, and athletes. In a separate case announced last year, the Department of Justice charged a former University of Michigan assistant football coach with carrying out a massive hacking operation involving university databases across the country.
Prosecutors allege that the former coach, identified in court filings as Weiss, gained access to student athlete databases at more than 100 colleges and universities. Through those systems, investigators say he obtained sensitive personal and medical information belonging to roughly 150,000 individuals.
Authorities further allege that Weiss broke into social media, email, and cloud storage accounts belonging to more than 2,000 athletes and an additional 1,300 students and alumni nationwide. According to prosecutors, the operation primarily targeted female college athletes and was aimed at obtaining private images and videos that were never meant for public sharing.
