Spytech data breach: 5645 accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2024-07-30
In July 2024, spyware maker Spytech suffered a data breach that exposed data collected as recently as the previous month. Designed to "invisibly record everything users do", the breach exposed information related to both purchasers and targets of the product. Target data collection (and subsequent exposure) included the infected computer name, browsing history, applications used, usernames of authenticated users, keywords being monitored, file operations (creation and deletion), computer usage times and email addresses, often captured within the spyware's logs. The data also included the names, purchases and md5 password hashes of purchasers. Exposed data: browsing histories, device information, email addresses, names, passwords, purchases, usernames. The breach dates from Jun 4, 2024; Have I Been Pwned loaded it on Jul 30, 2024.
What to do
- If you had a Spytech account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch
