Data breaches → mSpy
Was your data in the mSpy breach?
2015 · mspy.com · ~699,793 accounts exposedLow severity · 3/10
mSpy (mspy.com) suffered a data breach in 2015 that exposed around 699,793 accounts. If you had an account, some of your personal data may be circulating in leaked databases. The fastest way to know is to check your own email — free, in about 30 seconds, no password required.
What happened
In May 2015, the "monitoring" software known as mSpy suffered a major data breach. The software (allegedly often used to spy on unsuspecting victims), stored extensive personal information within their online service which after being breached, was made freely available on the internet.
Breach details sourced from Have I Been Pwned, the industry-standard breach database. Risk analysis by Nullivo.
What to do if you were affected
These steps are ordered for this specific breach — the most urgent action given what leaked comes first.
- Check whether your own email appears in this breach — run a free scan to confirm before you spend time on the steps above.
How urgent is this now?
This breach is over 11 years old. Old credentials still cause harm — leaked passwords from a decade ago are still tried against new accounts every day.
Remember: a breach can't be "un-leaked" — once a database is out, it exists in countless copies. The goal is to make the leaked data useless: change what can be changed, lock down what can't, and remove what has been republished.
Frequently asked questions
What data was exposed in the mSpy breach?
The mSpy breach exposed account data for around 699,793 people.
How many people were affected by the mSpy breach?
Around 699,793 accounts were exposed, making it a mid-sized breach.
What should I do if I had a mSpy account?
Change your password, enable two-factor authentication, and check whether your email appears in this breach with a free Nullivo scan.
Breaches that exposed similar data
If the mSpy breach affected you, these breaches exposed comparable information — worth checking too, since leaked datasets are routinely combined.
- Was your data in the Programming Forums breach? (2015, ~707,432 accounts)
- Was your data in the WildStar breach? (2015, ~738,556 accounts)
- Was your data in the Pokébip breach? (2015, ~657,001 accounts)
- Was your data in the Abandonia (2015) breach? (2015, ~776,125 accounts)
- Was your data in the Final Fantasy Shrine breach? (2015, ~620,677 accounts)
- Was your data in the Comcast breach? (2015, ~616,882 accounts)