The Rise and Risks of Stalkerware: A Deep Dive into Data Breaches

Stalkerware, software designed to monitor and spy on individuals, has become a significant concern due to its unethical use and frequent data breaches. Since 2017, at least 27 stalkerware companies have experienced hacks or data leaks, exposing sensitive information of both customers and victims. The most recent incident involved uMobix, where a hacktivist leaked payment information of over 500,000 customers, highlighting the ongoing vulnerabilities within this industry.

TechCrunch

The history of stalkerware breaches began with significant hacks of Retina-X and FlexiSpy in 2017, which compromised data from approximately 130,000 customers globally. In subsequent years, numerous companies like mSpy, SpyX, and Catwatchful faced similar fates, with breaches exposing personal data, including messages, photos, and GPS locations. Notably, mSpy leaked over 2 million customer records in 2018, while FamilyOrbit left 281 gigabytes of personal data unsecured online.

TechCrunch

The uMobix breach is part of a broader trend where hacktivists target stalkerware companies to expose their unethical practices. The hacker, known as "wikkid," exploited a vulnerability in the stalkerware vendor's website, scraping data that included customer email addresses and partial payment information. This incident underscores the lack of cybersecurity measures in place at these companies.

TechCrunchTechCrunch

The response to these breaches has varied. Some companies, like pcTattletale, have shut down following public scrutiny and legal challenges. Founder Bryan Fleming pled guilty to charges related to the unlawful sale of surveillance software. The Federal Trade Commission (FTC) has also taken action against stalkerware providers, banning SpyFone and its CEO from operating in the industry due to security lapses.

TechCrunch

Despite these actions, many stalkerware companies continue to operate, often rebranding after shutdowns. Eva Galperin, director of cybersecurity at the Electronic Frontier Foundation, noted that while hacks can disrupt operations, they do not eliminate the underlying issues within the stalkerware industry.

TechCrunch

Critics argue that the stalkerware industry is inherently toxic and unethical, as it promotes illegal surveillance of partners and children. Surveys and investigations have linked the use of stalkerware to real-world harm and violence, raising significant ethical concerns. Galperin emphasized that using stalkerware not only violates privacy but also places victims' data at risk.

TechCrunch

The prevalence of stalkerware and its associated risks highlight the urgent need for better cybersecurity practices and ethical considerations in technology use. While reports indicate a decline in stalkerware usage, the potential for rebranding and the emergence of new surveillance methods remain pressing issues. As the industry evolves, it is crucial for consumers to be aware of the legal and ethical implications of using such software. Resources like the National Domestic Violence Hotline and the Coalition Against Stalkerware provide support for those affected by these invasive technologies.

TechCrunch