mSpy Denies Breach, Even as Customers Confirm It
Summary: KrebsOnSecurity reported that sensitive data apparently stolen from hundreds of thousands of mSpy customers was posted to the Deep Web, and mSpy twice denied a breach to other publications, telling the BBC there was "no data of 400,000 of our customers on the web" and calling it a "predatory attack" by blackmailers it did not pay. Krebs contacted multiple people whose records appeared in the hundreds of gigabytes of leaked data, all of whom confirmed they were active or former paying mSpy customers, and mSpy later admitted a breach while downplaying the numbers.
Why it matters: The leaked cache held payment and personal data not just of customers but of their kids, employees and significant others - people who never chose to install the software - and Sen. Al Franken cited the breach in urging the Justice Department and FTC to investigate mSpy and in reintroducing legislation to outlaw such products.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026