Archive — US — techcrunch
Amazon is still hosting stalkerware victims’ data weeks after breach alert
Amazon has been alerted about three stalkerware apps (Cocospy, Spyic, Spyzie) storing stolen private data on its cloud services, but has yet to take action. Despite being notified weeks ago by TechCrunch, these apps continue to upload victims' data, affecting around 3.1 million individuals, as Amazon claims to be following procedural protocols before disabling any content. The inaction raises concerns about Amazon's enforcement of its own policies against spyware.
Key points
- Amazon is hosting stolen data from stalkerware apps Cocospy, Spyic, and Spyzie on its cloud servers.
- TechCrunch notified Amazon of the issue on February 20, but no actions have been reported.
- These apps have a collective reach of 3.1 million victims, many unaware their devices are compromised.
- Amazon claims it acts on reports but has not yet responded to TechCrunch's notifications as an 'abuse report'.
- The ongoing presence of these stalkerware apps on AWS highlights potential gaps in Amazon's data oversight and compliance enforcement.
Why it matters
- The rise of stalkerware addresses ongoing concerns about privacy and data protection in the digital age.
- As of 2025, there is increasing awareness and legislation around digital surveillance and harmful applications.
- This incident reflects broader issues about responsibility of cloud service providers in monitoring and controlling abusive technologies.
The case of Amazon's inaction against stalkerware apps raises critical questions about the responsibilities of tech giants in safeguarding user data and enforcing their own policies against malicious software, highlighting the need for stronger regulatory frameworks in the tech industry.