Breachesby GlyphCocospy
Disclosed Feb 20, 20251,798,059 accountsUnverified
Stalkerware bug exposes victims' phone data and 3.2M customer emails
A bug shared by stalkerware apps Cocospy and Spyic let anyone access messages, photos and call logs from monitored phones and the emails of customers; a researcher scraped about 3.2 million customer email addresses across Cocospy, Spyic and Spyzie.
What is known
| People affected | 1,798,059 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Feb 20, 2025 |
| Happened | Feb 14, 2025 |
| Attack | Exposed data |
| Data exposed | EmailsMessagesLocationOther |
| Sector | Tech · CN |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
| Check your email | Have I Been Pwned |
Sources
Notices filed
History of this record
aggregator to pressby seedSource
https://haveibeenpwned.com/Breach/Cocospy to https://techcrunch.com/2025/02/20/stalkerware-apps-cocospy-spyic-exposing-phone-data-of-millions-of-people/by seedSource
empty to CNby seedSource
unknown to misconfigurationby seedSource
["emails"] to ["emails","messages","location","other"]by seedSource
In February 2025, the spyware service Cocospy suffered a data breach along with sibling spyware service, Spyic . The Cocospy breach alone exposed almost 1.8M customer email addresses which were provided to HIBP, and reportedly also enabled to A bug shared by stalkerware apps Cocospy and Spyic let anyone access messages, photos and call logs from monitored phones and the emails of customers; a researcher scraped about 3.2 million customer email addresses across Cocospy, Spyic andby seedSource
empty to Stalkerware bug exposes victims' phone data and 3.2M customer emailsby seedSource
First recordedby backfillSource
First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.