Data breach exposes millions of mSpy spyware customers

Executive summary: A May 2024 breach of mSpy’s Zendesk customer support system exposed more than 100 GB of records containing millions of support tickets, email addresses, attachments, location data, and other personally identifiable information; the leak also revealed the Ukraine-based parent company Brainstack and showed sensitive misuse of the spyware by customers (including some officials). The dataset was shared publicly and added to Have I Been Pwned, raising large-scale privacy, legal, and safety risks for both users and alleged surveillance targets.