If you'll recall, Apple denied that the hacker exploited an iCloud flaw to access its users' accounts back then. Based on Collins' statement, the company was telling the truth. The hacker didn't take advantage of a security vulnerability: he phished his victims (who include Jennifer Lawrence, Kate Upton and many other female celebrities) or tried to guess their passwords.

That's why FBI Assistant Director David Bowdich warns:

"We continue to see both celebrities and victims from all walks of life suffer the consequences of this crime and strongly encourage users of Internet-connected devices to strengthen passwords and to be skeptical when replying to emails asking for personal information."

The feds aren't done investigating the case yet, but so far, they haven't found any evidence that Collins himself shared or uploaded the images and videos he stole. He's now facing a maximum sentence of five years in prison. If the judge agrees to both sides' recommendations, though, he could be out within 18 months.