Google took a month to shut down Catwatchful, a phone spyware operation hosted on its servers

TechCrunch reports that Catwatchful, an Android stalkerware app hosted on Google Firebase, was exposed by a security bug that allowed unauthenticated access to its backend database; the leak included ~62,000 customer emails and plaintext passwords and records for ~26,000 victim devices, and Google has since suspended the Firebase account, rendering the service offline.