A former Yahoo software engineer has pleaded guilty to accessing about 6,000 user accounts in search of n*de photos and videos. A press release from the US Attorney’s Office for the Northern District of California outlined the news.

It says the programmer, Reyes Daniel Ruiz, used his privileges at Yahoo to crack user passwords. He then accessed the accounts of primarily younger women, including friends and co-workers. He faces up to five years in prison and $250,000 in restitution.

It is still unclear exactly how Ruiz compromised Yahoo accounts. It could have directly been a result of his employee status, This means that Yahoo routinely lets employees access sensitive user information, like passwords or account recovery keys.

On the other hand, the engineer could simply have used internal knowledge of Yahoo’s cybersecurity protections and backend infrastructure to legitimately hack into users’ accounts. At the moment, the only public information on the case beyond the press release is a sealed indictment.

Nevertheless, Ruiz did not just compromise Yahoo accounts. The engineer also used the information he got from email messages and the account’s login access to compromise other accounts. According to the press release, he accessed iCloud, Facebook, Gmail, Dropbox, and other accounts.

Yahoo parent company Verizon Media, formerly known as Oath, did not immediately respond to a request for comment.

Yahoo discovered Ruiz’s activity by monitoring his employee account. This prompted him to destroy a computer and hard drive on which he was storing the stolen photos and videos. Ruiz, who is 34 and hails from Tracy, California, was charged with one count of computer intrusion and one count of interception of a wire communication.

Ruiz signed a plea agreement pleading guilty to the computer intrusion charge following a federal grand jury indictment in April. He will face sentencing in February of next year. He also faces a maximum penalty of five years in prison and a $250,000 restitution fine for his victims.