
TechCrunch reviewed the leaked data, which included years of victims’ call logs and text messages dating back to 2013. DDoSecrets said it was limiting the distribution of the data to journalists and researchers, given the amount of personally identifiable information in the cache. A copy of the hacked database also appeared online later the same day.ĭDoSecrets, a nonprofit transparency collective that indexes leaked datasets in the public interest, obtained a copy of the hacked LetMeSpy data and shared it with TechCrunch. The hacker intimated that they deleted LetMeSpy’s databases stored on the server.



It’s not clear who is behind the LetMeSpy hack or their motives. When Niebezpiecznik contacted the spyware maker for comment, the hacker reportedly responded instead, claiming to have seized wide access to the spyware maker’s domain. Polish security research blog Niebezpiecznik first reported the breach. Once planted, LetMeSpy silently uploads the phone’s text messages, call logs and precise location data to its servers, allowing the person who planted the app to track the person in real time.įor their deep level of access to a person’s phone, these surveillance apps are notoriously buggy and known for rudimentary security mistakes, with countless spyware apps over the years getting hacked, or leaking and exposing the private phone data stolen from unwitting victims. Also known as stalkerware or spouseware, these kinds of phone monitoring apps are often planted by someone - such as spouses or domestic partners - with physical access to a person’s phone, without their consent or knowledge. The app is also specifically designed to stay hidden on a phone’s home screen, making it difficult to detect and remove. LetMeSpy is a type of phone monitoring app that is marketed for parental control or employee monitoring. “As a result of the attack, the criminals gained access to e-mail addresses, telephone numbers and the content of messages collected on accounts,” the notice read.

The phone monitoring app, which is used to spy on thousands of people using Android phones around the world, said in a notice on its login page that on June 21, “a security incident occurred involving obtaining unauthorized access to the data of website users.” A hacker has stolen the messages, call logs and locations intercepted by a widely used phone monitoring app called LetMeSpy, according to the company that makes the spyware.
