Hacked, Leaked, Exposed: Who You Should Never Uses Stalkerware Apps

Hacked, Leaked, Exposed: Who You Should Never Uses Stalkerware Apps

There. Multiple App Makers Market

Yet, despite How Sensitive This Data is, an increing number of these these these companies.

According to TechCrunch’s Tally, Counting The Latest Datis Leak of Spyzie, Who Comes Shortly After the Data Exposures of Cocospy and Spyic, There Have Been at Least 24 StalkerWare Companies Bank 2017 that fi known to have been hacked, or learated, or Customer and Victims’ Data Online. That’s Note a typo: at Least 24 Stalkerware Comparti Comparer Been Hacked or Had a Signifant Data Exposure in Reward Years. And Four Stalkerware Companies Were Hacked Multiple Times.

Spyzie, Cocospy, and Spyic Are The First Stalkerware Companies in 2025 to have inadvertentThently exposed Sensitive Data. The Two Surveillance Operations Left Message, Photos, Call Logs, and Orther Personal and Sensitive Data of Millions of Victims Exposed Online, According to a Security Researcher Who Found a Bug That Allowed Theme to Access That Data.

The makers of the spyzie exposed 518,643 Unique Email Addresses of their Customers. In the Case of Cocospy, The Company Leaked 1.81 Million Customer Email Addresses, and Spyic Leaked 880,167 Customer Email Addresses. That’s A Total of More Thhan 3.2 Million Email Addresses, After Remove Duplicate Addresses That Application In Both Breaches, According to Analysis by Troy Hunt, Who Runs Data Breach Notification site

In 2024, there were at least Four Massive Stalkerware Hacks. The Last Stalkerware Breach in 2024 Affressed Spytech, A Little-Known Spyware Maker Based in Minnesota, Whic Exposed Activity Logs from the Phones, and Computers Monitored with Monitored with Monitored Stalkerware Apps, Who One of the Longest-Running Stalions of Customer Support Tickets, which has inculded the personal data of the Millions of Millions of Millions.

Previously, an Unknown Hacker Broke into the Servers of the Us-Based Stalkerware Maker PCTATTALALALE. The Hacker Theen Stole and Leaked The Company’s Internal Data. They Also Defaced PCTATTETALE’s Official Website

AS A RESULT OF THIS HACK, Leak and Shame Operation, PCTATTLETALE FOUNDER Bryan Fleming Said He Was Shutting Download.

Consumer Spyware Apps Like MSPY and PCTATTTALALALALALALALALE ARE AS STALKERWARE And there have been Multiple Court Casses, Journalistic Investigations and Surveys of Domestic Abuse Shelters online Staling and Monitoring Can Lead to Casses of Casses of Casses of Real-Work Harm and Violence.

And that’s WHY HACKERS HAVE REPEATEDLY TARGETED SOME OF THOSE.

EVA GALPERIN, The Director of Cybersecurity at the Electronic Frontier Foundation and A Leading Researcher and Activist Who Has Investigated and Fought Stalkerware For Years, Said The Stalkerware

“Galperin Told Techcrunch.

Given The History of Stalkerware Comproises, That May Be an Understatement. And the Personal Data of the Personal Data of the Personal Data of the Doubles of the Doubles of the Double. The Stalkerware Customers may be breaking the Law, Abusing their Partners by illegally Spying on Them, and on Top of That, Putting Everyonee’s Danger.

A History of Stalkerware Hacks

The Flurry of Stalkerware Breaches Began in 2017? Those Two Hacks Revealed that the Companies Had A Total Number of 130,000 Customers All Over The World.

At the time, the hackers who – proudly – Claimed Responsibility for the Compromisas Explicitly Said Their Motivation.

“One of the hackers involved thein Told Motherboard,“ I’m Going to Burn Them to the Ground, and Leave Absolutyl

Reference to Flexispy, The Hacker Added: Howver, I Fear They Might and Give Birdh to Themselves Again in A New Form. But if they do, I’ll be there. “

Despite The Hack, and the Years of Negative Public Attention, Flexispy is Still Active Today. The Same Cannot be Said About Retina-X.

The hacker who broke into retina-x wired its servers with the goal of hampering its operations. The Company Bounced Back – and then it Got Hacked Again A Year Later. A Couple of Weeks After the Second Breach, Retina-X Announted That it Was.

Just Days After the Second Retina-X Breach, Hackers Hit Mobistealth and SpyMaster Pro, Stealing Gigabytes of Customer and Business Records, As Wel As Victims Another Stalkerware Vendor, The India-Based Spyhuman, Encoount Later, with Hackers Stealing Text Mesage and Call Metadata, Who Callled Who and Who.

Weeks Later, the first case of Accidental Data Exposure, Rather Than a Hack. Spy Fone Left an Amazon-HOSSTED S3 Storage Bucket UNPROTTED Online, Who Meant Anone Culth Meante and Download Text Message, Photos, Audio Recordings, Location, Scrambled Passwords and Login Formation, Facebook Message, and ME. All That Data.

Operate Stalkerware Compranies That Over HAARS HAVE IRRESPONSIBLY Left Customers ‘and Victims’ Data Online Are Family Orbit, WHich Left 281 Gigabytes of Personal Data Online Mspy, WHich Leaked Over 2 Million Customer Records in 2018; Xnore, WHich Let Any of Its Customers See the Personal Data of Out Customers’ Targets, Who Included Chat Message, GPS Coordinates, Emails, Photos, and More; Mobiispy, Which Left 25,000 Audio Recordings and 95,000 images on a Server Accessible to Anyone; Kidsguard, WHich Had a MisConfigurered Server That Leaked Victims’ Content; PCTATTTALAL, WHich Prior to Its Hack Also Exposed Screenenhots of Victims and Now Spyzie, Cocospy and Spyic, Whic Left Victims ‘Message, Photos, Call Logs, and Oh Personal Data, As Well As Customers’ Email Addresses, Exposed Online.

As Farh As Operate Stalkerware Compranians That Actualy Got Hacked, There Was Copy9, Who Saw A Hacker Steal Steal Steal of All Its Surveillance Targes, Inclument Text Message and Whatsapp Message, Call Recordments, Photos, Contacts History; Letmespy, Who Shut Down After Hackers Breached and Wiped Its Servers; The Brazil-Based Webdetive, Who Also Got Its Servers Wiped, and Then Hacked Again; OWNSPY, WHich Provides Much of the Back-End Software for Webdetive, Also Got Hacked; Spyhide, WHich Had A Vulnerability in Its Code That Allowed a Hacker to Access The Back-End Databases and Years of Stolen Data from 60,000 Victims; OOSpy, Which Was a Rebrand of Spyide, Shut Down for a Second Time; and the Latest Mspy Hack, Which is unreedioled.

Finally there is thetruthspy, a network of stalkerware apps, which Holds the DububioBous Record of Hail Hacked or HAVEING LEAKED DATA ON AT LEAST THREE Separate Occasions.

Hacked, but unrepented

Of these 23 Stalkerware Companies, Eight Have Shut Download, According to Techcrunch’s Tallly.

In a First and Far Unique Case, The Federal Trade Commission Banned Spyfone and Its Chief Executive, Scott Zucmerman, From Operating in the Surveillance Industry Following An Earlier Security Lapse that Exposed Victims Another Stalkerware Operation Linked to Zuckerman, Called SpyTRAC, Subsequently Shut Down Following a Techcrunch Investigation.

Phonespector and Highster, Another Two Companies that Are Not Known to Have Been Hacked, Also Shut Down After New York’s Attorney General Accused the Companies of Explicitly Encouraging Customers.

But a Company Closing Doesn’t Mean It’s Gone Forever. AS with Spyfone and Spyfone, SOME OF THE SAME OWERS AND DEVELOPERS BEHIN A SHUTTERED STALKERWARE MACER SIMPLY REBRANDED.

“They do account Things, they do id id in it,” Galperin Said. “BUT YOU THAT If You Hack A Stalkerware Company, That They Will Simply Shake Their Fists, Curse Your Name, Disappear in A Puff of Blue Smoke and Never Been Again, That Has Most Definitely Not The Case.

“What Happens Most often, Who You Activally Manage to Kill A Stalkerware Company, Is The Stalkerware Company Comes Up Like Mushrooms After the Rain.

There is SOME Good News. In a Report Last Year, Security Company Malwarebytes Said That The Uses of Stalkerware is Declining, Account of it. ALSO, Galperin Reports Seeing An Increase In Negative Reviews of These Apps, with Customers or Prospective Customers Compleining.

But, Galperin Said that it’s Possible That Security Firms Aren’ts Aren’ts Aren’ts as they used to be, or stalkers have moved from Software-Based Surveillance to Physical Surveillan.

“Stalkerware do not exist in a vacuum. Stalkerware is part of a whole World of Tech-Enabled Abuse, ”Galperin Said.

Say No to Stalkerware

Using Spyware to Monitor Your Loved Ones is not only unethical, it’s also illegal in most jurisdictions, as it’s consuderted unlawful surveillance.

That is already a significant reason not to us stalkerware. Thes that are the issue that stalkerware makers have proven and time again that they cannot keep data secure.

Apart from Spying on Romantic Partners and Spouses, SOME PEOPLE USE STALKERware Apps to Monir. WHO This Type of Use, At Least in the United States, is Legal, it Doesn’t Mean Using Stalkerware to Snoop on Your Kids’ Phone Isn’t Creeepy and Unethical.

EVEN IF Its Lawful, Galperin Thinks Parents Should Not Spy On Their Children with the const.

IF Parents Do Not Recents The Children and Get their Go-Ahead, Parents Shoud Stay Away from Incecure and Untrustworthy Stalkerware Apps and Us Parental Trackking Tools Built into Apple Phones and Tables Android Devices That Are Safer Overtly.

Recap of Breaches and Leaks

Here’s The Complete List of Stalkerware Companies that have been hacked or have leaked sensitive Data Exquir 2017, in Chronological Order:

• Retina-X (2017, 2018)
• Flexispy (2017)
• Mobistealh (2018)
• Spy Master Pro (2018)
• Spyhuman (2018)
• Spyfone (2018)
• Familyorbit (2018)
• MSPY (2018, 2024)
• Xnore (2018)
• COPY9 (2018)
• Mobiispy (2019)
• Kidsguard (2020)
• PCTATTETALE (2021, 2024)
• XNSPY (2022)
• Spyhide (2023)
• ThetruthSpy (2021, 2022, 2023, 2024)
• Letmespy (2023)
• Webdetetive (2023, 2024)
• OWNSPY (2023)
• OOSpy (2023)
• Spytech (2024)
• Cocospy (2025)
• Spyic (2025)
• Spyzie. (2025)

Updated on February 27, 2025, To Include Spyzie as the Latest Buggy Stalkerware App.

IF You or Someone You Know Needs Help, The National Domestic Violence Hotline (1-800-799-7233) Provides 24/7 Free, Confidental Support to Victims of Domestic Abuse and Violence. IF you are in an emergency situation, Call 911.