Ever wonder where all those phone photos of nude celebrities come from?

Arstechnica may provide part of the answer in this article -

Hacking Scarlett Johansson—and 50 other celebs—using Google and gumption

Basically using the forgotten password / password reset feature on various webmail services thsi guy was able to access and redirect / clone celebrity email. Sneaky but not original. That's the same way Sarah Palin's email was hacked in 2008. You would think that would be fixed by now.