> If you put it on the internet, it's not private.
Sorry to say it, but you are simply misinformed. A properly maintained "private" site is just as private as your home, behind a closed and locked door. If you entrust a key to a friend who betrays you, that's unfortunate, but your house is private, not public.
I maintain a number of public and private websites, in addition to some secure business sites. I cannot vouch for the security or procedures of the private portion of the website that this girl's photos were published on, of course, but I have to tell you that -IF- the owners of the site were doing their job, then the only way the photos could become public was an "inside job" -- one of her friends or family leaked them.
And can you cite some sort of law this person may have broken? He/she may be a jerk, but that doesn’t make him/her a criminal.