pcTattletale

Profile narrative

pcTattletale is marketed as a consumer‑grade spyware application that allows a purchaser to secretly monitor the activity of a target smartphone, tablet, or computer. Once installed, the software operates in the background, capturing periodic screenshots of the device’s screen, logging keystrokes, recording call and message metadata, and transmitting this information to a remote server controlled by the vendor. The collected data can be accessed through a web‑based dashboard that presents the screenshots in chronological order, enabling the buyer to view a near‑real‑time visual record of the target’s usage. Although the vendor promoted the tool for legitimate purposes such as parental supervision or employee oversight, investigative reporting indicated that it was also employed to surveil hotel check‑in computers, thereby capturing the screen activity of guests as they entered personal information. The service was sold primarily through online channels and relied on a subscription model that granted access to the monitoring dashboard for a recurring fee.

The company’s headquarters are located in the United States, and prior to the security incident it claimed a customer base that led to the exposure of personal data belonging to over 138,000 individuals when its systems were breached on January 1, 2024. An unidentified threat actor gained unauthorized access to pcTattletale’s servers, exfiltrated customer databases containing names, email addresses, payment information, and other account details, and subsequently leaked this material online. In addition to the customer data, the attacker disclosed a repository of screenshots that had been harvested from monitored devices and made publicly viewable, demonstrating the extent of the surveillance data the service had accumulated. The breach was accompanied by the defacement of pcTattletale’s public website, where the intruder posted messages condemning the company’s role in enabling stalkerware and calling for its shutdown. Earlier reports had already highlighted the software’s use on hotel check‑in systems, raising concerns about the capture of sensitive traveler information in hospitality environments.

pcTattletale’s case is notable because it resulted in the first criminal conviction of a United States‑based spyware operator in more than ten years; founder Bryan Fleming pleaded guilty in a federal court in San Diego to charges of computer hacking, conspiracy, and selling and advertising surveillance software for unlawful purposes. The plea agreement acknowledged that the company’s product was designed and marketed to facilitate illegal monitoring, and it underscored the legal risks associated with developing and distributing stalkerware. Following the breach, the ensuing publicity, and the criminal proceedings, Fleming announced the cessation of pcTattletale’s operations, effectively ending the service’s commercial availability. The available sources do not disclose any parent company, subsidiary relationships, or ownership structure beyond the founder’s individual role, so no further organizational details can be confirmed.

Incidents

1 incident linked to this organisation.