Cocospy
Disclosed Feb 20, 20251 year ago1,798,059 accountsUnverified
Stalkerware bug exposes victims' phone data and 3.2M customer emails
A bug shared by stalkerware apps Cocospy and Spyic let anyone access messages, photos and call logs from monitored phones and the emails of customers; a researcher scraped about 3.2 million customer email addresses across Cocospy, Spyic and Spyzie.
What is known
| People affected | 1,798,059 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Feb 20, 2025 |
| Happened | Feb 14, 2025 |
| Attack | Exposed data |
| Data exposed | Emails, Messages, Location, Other |
| Sector | Tech · CN |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
| Check your email | Have I Been Pwned |
Sources
| Source | |
|---|---|
| Have I Been Pwned: Cocospyhaveibeenpwned.com · Aggregator | Aggregator |
| Stalkerware apps Cocospy and Spyic are exposing phone data of millions of peopletechcrunch.com · News | News |
| The biggest data breaches of 2025, so fartechcrunch.com · News | News |
Notices filed
| Where | Filed | People |
|---|---|---|
| Have I Been Pwnedaccounts in the data | Feb 20, 2025 | 1,798,059 |
| Researchtotal | Feb 20, 2025 |
History of this record
- 2026-09-25 · source_type: aggregator to press · seed source
- 2026-09-25 · source_url: https://haveibeenpwned.com/Breach/Cocospy to https://techcrunch.com/2025/02/20/stalkerware-apps-cocospy-spyic-exposing-phone-data-of-millions-of-people/ · seed source
- 2026-09-25 · country: empty to CN · seed source
- 2026-09-25 · attack: unknown to misconfiguration · seed source
- 2026-09-25 · data_types: ["emails"] to ["emails","messages","location","other"] · seed source
- 2026-09-25 · summary: In February 2025, the spyware service Cocospy suffered a data breach along with sibling spyware service, Spyic . The Cocospy breach alone exposed almost 1.8M customer email addresses which were provided to HIBP, and reportedly also enabled to A bug shared by stalkerware apps Cocospy and Spyic let anyone access messages, photos and call logs from monitored phones and the emails of customers; a researcher scraped about 3.2 million customer email addresses across Cocospy, Spyic and · seed source
- 2026-09-25 · title: empty to Stalkerware bug exposes victims' phone data and 3.2M customer emails · seed source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.