Cameron Lacroix
American who, at 16, dumped Paris Hilton's phone contacts and photos onto the web in 2005 — and was caught again nine years later.
Lacroix was a Massachusetts teenager when he got into Paris Hilton's T-Mobile account and published the contents of her Sidekick: celebrity phone numbers, notes and photos. The method was more social engineering than technique — talking customer service round was easier than breaking anything. The same circle was behind a breach at the data broker LexisNexis.
He was sentenced in 2005 to eleven months in juvenile detention. In 2014 he was sentenced again, this time to four years in prison, for breaking into police email systems and stealing card data. The case still comes up whenever someone points out how weak password resets through a call centre are — a weakness that has aged remarkably well.