emails, support tickets, attachments, and private documents. This is the third time the mSpy app has faced a data breach since founded in 2010, and the last one happened in 2018.
This kind of hacking attack is more and more notorious. Spyware providers are their main subjects. Hacking attacks are dangerous because of their sensitive personal data content. In this case, the mSpy app users and the people who had the app installed without their consent were exposed.
This data breach involved all the customer service records since 2014. The data was stolen from the mSpy spyware maker’s Zendesk-powered customer assistance system.
mSpy software is designed to monitor and help parents watch their children's online activity. The app intercepts data from the children’s phones and transfers it to the parent account, allowing them to see a whole report about it. It also promotes itself as a way to monitor employers.
Unfortunately, the app is broadly used to spy on different people without their consent. Even more so, those apps are mostly related to people involved in relationships. They install the app on their partner's phone without permission, following their activity. The app must be manually installed, so whoever plants this program on the phone, must have direct physical access to it. Later, they have real-time access to the phone’s data.
This data breach includes mSpy’s customer records, such as emails from people trying to obtain help in spying on other devices. Some of the data includes demanding support emails from unexpected people, such as a couple of senior-ranking U.S. military workforce, a serving federal appeals court judge in the U.S., and a country sheriff’s bureau from Arkansas state, asking for a free trial of the app.
Even after collecting several million customer assistance tickets, the breached Zendesk data is thought to be only the part of mSpy users who asked for customer support. It is believed that the number of mSpy spyware users is way larger than that.
It is not illegal to buy a spy app subscription, but it is against the law when it’s used in the wrong context, such as selling or using it to monitor someone without their agreement.
The Ukrainian-based company that owns the mSpy Spyware hasn’t made any public statements yet.