A DEA agent stole a woman’s name, background and revealing photos to track drug traffickers on Facebook.

Sondra Prince’s Facebook page wasn’t anything out of the ordinary — some more revealing photos, a picture of her son and bragging posts about her car. There was one problem — the account wasn’t Sondra’s.

Facebook’s rules are clear and simple — setting up an account that impersonates another person goes against the social network’s terms. Yet Special Agent Timothy Sinnigen of the U.S. Drug Enforcement Administration used photos from Arquiett’s cell phone, which was seized during a 2010 arrest, to create a Facebook profile of private photos under Arquiett’s real name. Sinnigen even posted a photo of Arquiett’s young niece and son as he tracked down drug traffickers.

Arquiett is suing Sinnigen for $250,000 in damages in a New York U.S. District Court. Sinnigen’s defense is arguing that Arquiett gave “implicit” consent to use the information stored on her phone. If the court sides with Sinnigen’s argument, it could mean a drastic privacy setback for anyone under arrest.

Since Buzzfeed’s Chris Hamby first reported the story, the Justice Department has begun an investigation and Facebook has taken down the page, which it says violates its terms and conditions.