On February 14, 2025, the spyware service Cocospy exposed email addresses belonging to 1.8 million customers in a breach that also reportedly allowed unauthorised access to the very messages, photos, call logs, and location data the software had secretly collected from victims’ phones.
Named in this incident?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch Cocospy
Get alerted the next time Cocospy files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about Cocospy’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
What Public Reporting Shows
Public reporting indicates the breach affected both Cocospy and its sister service Spyic. The Cocospy portion alone compromised nearly 1.8 million email addresses, which were later provided to Have I Been Pwned. Available reporting describes additional unauthorised access to captured messages, photos, call logs, and other surveillance material stored by the spyware platform. The incident was disclosed in mid-February 2025, placing it among the more significant exposures of surveillance-tool customers in recent years.
Why This Matters for You and Your Family
If you or anyone in your household has ever used Cocospy or Spyic, your email address is now public. More troubling is the possibility that the same credentials or session data could have been used to reach the intimate material the software was designed to steal: text messages, private photos, call histories, and precise location records. Once that combination escapes, it rarely stays contained. A single exposed email can unlock password resets on other accounts, turning one breach into a chain of compromises that affect your finances, your children’s safety, and your peace of mind.
The Doxxing and Identity-Chain Implications
Credential leaks like this one frequently cascade into account takeovers and doxxing chains. An attacker who obtains your Cocospy email can test it across popular services, gaming platforms, and family-linked accounts. Children’s gaming usernames, often tied to the same household email or phone number, become easy follow-on targets. What begins as a list of surveillance customers can quickly evolve into public dossiers containing real names, addresses, and live location history. DoxxScan by GalaxyWarden specialises in continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, using AI-powered identity-chain mapping to link handles, emails, and phones back to real identities, while its specialists perform hands-on remediation and extend coverage to every member of your household, including children’s gaming accounts.