SpyFone data breach: 44K accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2018-08-24
In August 2018, the spyware company SpyFone left terabytes of data publicly exposed. Collected surreptitiously whilst the targets were using their devices, the data included photos, audio recordings, text messages and browsing history which were then exposed via a number of misconfigurations within SpyFone's systems. The data belonged the thousands of SpyFone customers and included 44k unique email addresses, many likely belonging to people the targeted phones had contact with. Exposed data: audio recordings, browsing histories, device information, email addresses, geographic locations, imei numbers, ip addresses, names, passwords, photos, sms messages. The breach dates from Aug 16, 2018; Have I Been Pwned loaded it on Aug 24, 2018.
What to do
- If you had a SpyFone account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch
