\n<\/p>\n
The founder of the spyware app pcTattletale said his company is \u201cout of business and completely done\u201d following a data breach over the weekend.<\/p>\n
The shutdown comes days after a hacker defaced the spyware maker\u2019s website<\/a> and published links containing large amounts of data from pcTattletale\u2019s servers, including databases of customers\u2019 information and some victims\u2019 stolen data.<\/p>\n pcTattletale was a remote surveillance app \u2014 often known as \u201cstalkerware\u201d for its ability to track people without their knowledge \u2014 that allowed the person who planted the app to remotely view screenshots of the victim\u2019s Android or Windows device and its private data from anywhere in the world. pcTattletale advertised its spyware app as a way to monitor employees, but also openly promoted its ability to snoop on spouses and domestic partners without their consent, which is illegal.\u00a0<\/p>\n The now-defunct app had 138,000 customers who had signed up to use the service, per data breach notification site Have I Been Pwned<\/a>.<\/p>\n On the defaced website, the hacker said pcTattletale\u2019s servers could be tricked into turning over the private keys for its Amazon Web Services account, which the spyware maker used to store hundreds of millions of screenshots of the devices the spyware was planted on. <\/p>\n pcTattletale\u2019s website remains offline at the time of writing.<\/p>\n pcTattletale founder Bryan Fleming told TechCrunch in a text message on Tuesday that he no longer has access to the company\u2019s Amazon Web Services account.<\/p>\n \u201cI deleted everything because the data breach could have exposed my customers,\u201d said Fleming.<\/p>\n \u201cThe account is closed [and] the servers are deleted,\u201d said Fleming.<\/p>\n An analysis of the exposed data<\/a> shows that pcTattletale stored on its Amazon S3 storage server more than 300 million screenshots of victims\u2019 devices dating back years.\u00a0TechCrunch independently confirmed that there were publicly accessible screenshots from pcTattletale-monitored devices online. <\/p>\n It looks as if Amazon may have taken action against the spyware maker. The Amazon S3 storage server pcTattletale used to store device screenshots<\/a> now reads \u201cAllAccessDisabled,\u201d an error code that Amazon uses to block all access to a customer\u2019s account, including the customer, whose only recourse is to contact Amazon \u201cfor further assistance.\u201d However, Fleming would not address the question of whether AWS had shut it down, and AWS spokesperson Grant Milne would not say, either.\u00a0<\/p>\n Fleming said he did not keep a copy of the data, and did not explain the company deleted the data without first notifying those whose information was exposed in the data breach. He stopped responding to our inquiries.<\/p>\n pcTattletale\u2019s situation is not unique: Spyware apps are notoriously buggy and are known to leak or spill data. Federal regulators have in the past banned stalkerware makers from the surveillance industry<\/a> for inadequate security practices.\u00a0<\/p>\n When asked about pcTattletale, FTC spokesperson Juliana Gruenwald Henderson said the agency does not comment on whether it is investigating a certain matter.<\/p>\n Other spyware makers have shut down after similar breaches. Polish-developed spyware LetMeSpy shut down in June 2023 after its systems were hacked and its customers\u2019 data deleted<\/a>, and spyware apps PhoneSpector and Highster <\/a>shut down following a New York state investigation.<\/p>\n