On February 22, 2024, 519,000 Spyzie customer email addresses appeared in a breach notification published by Have I Been Pwned. The spyware-as-a-service platform, along with its sister services Spyic and Cocospy, had been compromised, exposing the contact details of individuals who paid to monitor other people’s phones. The disclosure indicates that the breach also enabled unauthorised access to the very data Spyzie was designed to capture: messages, photos, call logs, and additional surveillance material belonging to the targets of that spyware.
Named in this incident?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch Spyzie
Get alerted the next time Spyzie files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about Spyzie’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
Primary Disclosure Details
The Have I Been Pwned listing states that 519K email addresses tied to Spyzie accounts were exposed. It does not quantify how many additional surveillance records were accessed. The notification confirms the incident occurred prior to February 2024 and that the compromised data set was later provided directly to the breach database. No ransom demand figure or exact breach date is published in the primary disclosure. The listing makes clear that customers of the service — not the people being spied upon — are the ones whose contact information was leaked.
Why This Matters for You and Your Family
If you or someone in your household ever used Spyzie, Spyic, or Cocospy, your email address is now public. That single piece of information often serves as the starting point for credential-stuffing attacks, phishing campaigns, and identity-verification bypasses on other sites. More troubling is the secondary exposure: the attackers gained access to the intercepted messages, photos, and call logs that the spyware had collected from phones belonging to spouses, children, or employees. Those intimate details can be leveraged for extortion, doxxing, or further targeting of your family. Even if you were only a customer and not a surveillance target, the breach creates a permanent record that links your payment email to the practice of secretly monitoring someone else’s device.
Doxxing and Identity-Chain Risks
Email addresses from spyware services are high-value connectors in doxxing chains. Once an attacker has your Spyzie-linked email, they can correlate it with account-recovery details on messaging apps, cloud storage, or gaming platforms. This is exactly why credential leaks like this one cascade into account takeovers. A child’s gaming account that shares the same recovery email as a parent’s Spyzie registration can quickly become part of the same exposure chain. Public records, social-media handles, and phone numbers tied to that email can then be assembled into a full identity profile. The risk is not theoretical; it is a direct pathway from one compromised spyware login to real-world harassment or blackmail of you or your family members.