Perhaps the only thing worse than not knowing there’s a secret app installed on your phone tracking your movements is not knowing that said app has been hacked. The phone monitoring app LetMeSpy, which lets people download spyware onto others’ Android phones so they can covertly keep track of them, was reportedly the victim of a hack.
LetMeSpy, which is marketed for parental or employee monitoring, is designed to run hidden in the background on a device and quietly uploads text messages, call logs and location data. All you need is physical access to the phone to install the program. Polish security research blog Niebezpiecznik was the first to report the hack of LetMeSpy, saying that the hacker responded when they attempted to contact the app’s creators. The hacker claimed to have gained access to LetMeSpy’s domain.
A copy of the data stored on LetMeSpy’s database reportedly leaked online later the same day. TechCrunch obtained a copy of the leaked data from DDoSecrets. It contains information from at least 13,000 devices, some of which dates all the way back to 2013. The creators of LetMeSpy had yet to comment on the situation as of Tuesday afternoon.
