Celebrity data leak exposes private photos and messages due to stalkerware

A significant leak of private photos, screenshots, and messages linked to a well-known European celebrity and several social media figures has been uncovered. The files, totaling 86,859 images, were stored in a publicly accessible database without password protection, as reported by HackRead.

Cybersecurity researcher Jeremiah Fowler discovered the data, which included intimate chat logs from apps like WhatsApp, Facebook, TikTok, and Instagram. Many screenshots appear to have been captured directly from the victim's phone, suggesting the use of stalkerware, a type of spyware secretly installed on a device to monitor all activity. The exposed data also contained personal information such as phone numbers, email addresses, and ID documents. Fowler suspects the perpetrator likely failed to password-protect the storage folder, leading to the public accessibility of the misconfigured server.

While Fowler did not name the victims to protect their privacy, he has contacted them and law enforcement. Stalkerware can bypass end-to-end encryption by capturing screen activity and can track GPS locations, read texts, and activate the phone's camera and microphone. Users are advised to watch for signs of spyware, such as rapid battery drain or overheating, and to use strong passwords and secure their devices.

Source: HackRead