SpyX data breach: 2.0M accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2025-03-19
In June 2024, spyware maker SpyX suffered a data breach that exposed almost 2M unique email addresses. The breach also exposed IP addresses, countries of residence, device information and 6-digit PINs in the password field. Further, a collection of iCloud credentials likely used to monitor targets directly via the cloud were also in the breach and contained the target's email address and plain text Apple password. Exposed data: device information, email addresses, geographic locations, ip addresses, passwords. The breach dates from Jun 24, 2024; Have I Been Pwned loaded it on Mar 19, 2025.
What to do
- If you had a SpyX account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch
