SpyX Data Breach

What happened?

In June 2024, spyware maker SpyX suffered a data breach that exposed almost 2M unique email addresses . The breach also exposed IP addresses, countries of residence, device information and 6-digit PINs in the password field. Further, a collection of iCloud credentials likely used to monitor targets directly via the cloud were also in the breach and contained the target's email address and plain text Apple password.

When did it happen?

The breach date in the public record is June 24, 2024. The record was added to the catalogue on March 19, 2025 and last updated there on March 19, 2025.

What information was reported as exposed?

• Device information
• Email addresses
• Geographic locations
• IP addresses
• Passwords

These are incident-level categories. The record does not prove that every category was exposed for every affected person.

Who may be affected?

This record may be relevant to people who had an account or other relationship with SpyX or used spyx.com around June 24, 2024. A catalogue entry does not establish that every customer was affected or that every listed data category applied to each person. Compare the record with an official notice addressed to you.

What should you do?

Choose actions that match the information involved. If you find signs that someone is using your identity, the Federal Trade Commission provides a personal recovery plan at IdentityTheft.gov.