Another Major Spyware Firm Breached — Thousands of Devices Have Private Details Exposed

A significant security breach at the US spyware company, Spytech, has led to the online exposure of sensitive data from thousands of devices. The leaked data includes detailed activity logs from devices monitored by Spytech’s software.

According to a report by TechCrunch, the breach was brought to light by an anonymous individual who shared an unencrypted cache of files from Spytech’s servers with the publication. The authenticity of these files has been confirmed by TechCrunch.

The leaked files reveal detailed activity logs from over 10,000 compromised devices, including location data. Most of the affected devices are located in Europe and the United States, with notable groups of victims in Africa, Asia, Australia, and the Middle East. Fortunately, the leaked data lacks sufficient personally identifiable information to directly link it to specific individuals. As a result, TechCrunch was unable to notify the affected users.

Upon learning about the breach, Spytech’s CEO, Nathan Polencheck, expressed surprise, stating, "This is the first I have heard of the breach and have not seen the data you have seen, so at this time all I can really say is that I am investigating everything and will take the appropriate actions."

Spytech is known for its spyware applications, Realtime-Spy and SpyAgent. The majority of compromised devices are Windows-based, with some Android, Mac, and Chromebook devices also affected. Spyware, often referred to as spouseware, is marketed as a way to monitor children, employees, and romantic partners. However, these applications often remain hidden on devices and are frequently installed without the knowledge or consent of the user, which raises significant ethical and legal concerns.