Hacktivist scrapes over 500,000 stalkerware customers’ payment records

A hacktivist known as “wikkid” scraped and published about 536,000 customer transaction records from a stalkerware vendor (identified as Struktura / Ersten Group), exposing email addresses, purchased app/brand, payment amounts, card type and last four digits. TechCrunch verified the dataset by confirming accounts tied to disposable emails and matching invoice numbers, and reported the data was obtained via a trivial website vulnerability; the exposed records were later posted on a hacking forum.