Ariana Grande Sues Hackers Over Unreleased Music and Photo Leaks

Ariana Grande has filed a lawsuit against unidentified hackers accused of orchestrating a yearslong campaign to steal and distribute her unreleased music, private videos, and personal photos, according to multiple reports. The legal action, filed Monday in Los Angeles County Superior Court, targets unnamed defendants under the pseudonyms John Doe 1 and John Does 2 through 100. The case centers on alleged breaches of collaborators’ accounts, including photographers, producers, and digital technicians, which Grande’s legal team claims have caused “substantial and irreparable harm” to her creative process and career.

The complaint alleges that hackers accessed unreleased material through a series of targeted attacks, beginning in 2019 when a photographer’s Dropbox account was compromised, leading to the theft of photos tied to Grande’s work. A year later, a producer’s mobile device was hacked, exposing demos, studio footage, and unreleased recordings. By 2024, the tactics had evolved to include phishing operations, such as the creation of a fake Gmail account impersonating one of Grande’s photographers to deceive a digital technician into sharing private files. The stolen content, described as “not intended for public consumption,” included music videos, album outtakes, and personal footage, which the lawsuit claims was sold on the dark web and distributed through underground markets.

Grande’s legal team highlights that the leaks spanned decades, with the complaint stating that 45 unreleased songs were stolen and distributed in 2023 alone. The filing also references hundreds of similar breaches dating back to her 2011 debut, framing the incidents as a “systematic theft” of creative work. The lawsuit invokes California’s Comprehensive Computer Data Access and Fraud Act, alongside claims of invasion of privacy and civil conversion, seeking to hold the perpetrators accountable for what it describes as “unlawful and egregious theft.”

The timing of the lawsuit coincides with the imminent release of Grande’s eighth studio album, *petal*, scheduled for July 31, 2026. The legal action comes days after the singer addressed past leaks, including the unauthorized release of her 2024 track “Fantasize,” which she had intended for a television project. In a 2024 interview, Grande vowed to “see [the hackers] in jail,” calling them “thieves and pirates.” The lawsuit, according to a source close to the singer, aims to deter future breaches by setting a precedent for holding anonymous actors accountable.

Grande’s team is leveraging the court process to subpoena internet service providers, online platforms, and payment processors, seeking to trace the hackers’ identities. This strategy mirrors broader industry concerns about the vulnerability of remote collaboration tools, which have become prime targets for cyberattacks. The case also echoes the 2014 iCloud celebrity photo hack, though Grande’s approach differs by using civil litigation as a proactive tool to unmask anonymous defendants. Industry observers note that the outcome could pressure cloud service providers to enhance security measures for high-profile creative teams.

The lawsuit’s focus on collaborators’ accounts underscores a growing trend in cybercrime, where attackers bypass direct targets by exploiting indirect access points. Grande’s legal team argues that the leaks disrupted her “business relationships, creative process, and peace of mind,” forcing adjustments to release strategies and re-recording efforts. The case also highlights the financial incentives for hackers, with reports indicating that stolen content was sold for “significant sums” through platforms like PayPal and Cash App.

While the defendants remain unidentified, the lawsuit represents a strategic shift in how artists combat digital theft. By targeting the infrastructure of leaks rather than individual perpetrators, Grande’s team seeks to address systemic vulnerabilities in the entertainment industry’s digital workflows. The case will test the extent to which California courts can compel tech companies to reveal information about anonymous actors, potentially reshaping how creative professionals protect their work in an era of increasing cyber threats.