Hacked, leaked, exposed: Why you should never use stalkerware apps

A troubling trend has emerged in the world of personal surveillance: an industry dedicated to creating apps designed to monitor and spy on individuals without their knowledge. Known commonly as stalkerware, these applications are marketed to jealous partners seeking to invade the privacy of their loved ones. However, these companies are increasingly falling victim to massive data breaches. Since 2017, at least 27 stalkerware firms have reported hacks or significant data leaks, according to ongoing investigations by TechCrunch. The latest incident involves uMobix, which was recently compromised, exposing sensitive payment information of over 500,000 customers. This breach is part of a disturbing pattern where hacktivists target stalkerware companies, echoing earlier attacks on firms like Retina-X and FlexiSpy. The issue of data security in this sector is alarming. In 2025 alone, several stalkerware services, including Catwatchful, SpyX, and Cocospy, suffered breaches that made personal data—such as messages, call logs, and photos—accessible online. A notable breach from 2024 involved Spytech, revealing logs from devices it monitored. These incidents showcase the industry’s negligence in protecting sensitive data, putting countless victims at risk. Eva Galperin, the cybersecurity director at the Electronic Frontier Foundation, has highlighted the stalkerware industry as a "soft target," noting that many companies lack scruples regarding the quality of their products. This negligence not only endangers the data of their customers but also poses a significant risk to the privacy of countless unsuspecting victims. The surge of breaches began in 2017, with the hacks of Retina-X and FlexiSpy, which exposed over 130,000 customers. Hackers involved in these breaches stated their intent to dismantle an industry they deemed toxic and unethical. Despite the negative attention and previous breaches, some firms, like FlexiSpy, continue to operate. The consequences of using stalkerware extend beyond just data breaches; they can lead to real-world harm and violence. Multiple studies and surveys indicate that online stalking often correlates with domestic abuse. The implications are dire, as the technology that enables such invasive monitoring is often misused. While some stalkerware companies have shut down following breaches or legal action, the reality is that many simply rebrand and continue their operations. For instance, the Federal Trade Commission (FTC) has banned certain individuals from the industry, yet the problem persists as new companies emerge under different names. Despite the overwhelming evidence against stalkerware, some recent reports indicate a decline in its usage. Security firm Malwarebytes noted a reduction in infections among its customers, and Galperin has observed a rise in negative feedback regarding these applications. However, concerns remain that stalkers may shift towards physical surveillance methods instead. Using stalkerware is not just ethically questionable; it is illegal in many jurisdictions, categorized as unlawful surveillance. This raises serious concerns about the implications of such software. Moreover, parents considering monitoring their children should seek safer, more ethical alternatives, such as the parental controls integrated into smartphones. The ongoing crisis surrounding stalkerware serves as a stark reminder of the need for heightened awareness around privacy and surveillance technologies in our digital age. For those affected by domestic abuse or considering the use of such applications, resources like the National Domestic Violence Hotline are available to provide confidential support.