More Evidence of mSpy Apathy Over Breach
Summary: Mobile spyware maker mSpy downplayed a breach in which hundreds of gigabytes of files, chat logs, location records and screenshots were dumped to the Deep Web after the company reportedly declined hackers' extortion demands. Nearly two weeks after the breach became public, a 13 gigabyte compressed directory of screenshots taken from mSpy-infected devices remained viewable in a web browser via incomplete links in the leaked log file, and mSpy said it was re-hashing the exposed data to make the leaked links inoperable within 24 hours.
Key Takeaway: The leaked screenshots include images taken secretly by people who installed the software on a friend's or partner's device, and the bookmarks and browser windows in those images make many device owners trivial to identify - even as mSpy told Krebs the logs cannot be traced back to the data owner.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026