Stalkerware vendors repeatedly exposed monitor and victim data

What happened

Commercial monitoring tools are sold for parental or workplace oversight but are frequently misused for non-consensual surveillance. The vendors themselves have repeatedly suffered major data breaches.

Using stalkerware without the monitored person's consent is illegal in most jurisdictions.

What was found

iOS products often obtain an Apple ID or iCloud password and pull data from backups. mSpy has suffered three major breaches, while similar incidents exposed millions of records across the industry.

Data at risk

• Apple ID
• iCloud backups
• Messages
• Call logs
• Location data
• Support records

What you should do

1. 1Check Find My and VPN & Device Management for unfamiliar access.
2. 2Enable two-factor authentication and change the Apple ID password.
3. 3Do not use monitoring software without clear consent.
4. 4If surveillance is suspected, re-secure every device and seek support.