80K Screenshots Exposed in Stalkerware Leak

A recent discovery by cybersecurity researcher Jeremiah Fowler shows how quickly a single compromised device can fuel a much larger exposure.

An unsecured database containing tens of thousands of screenshots, reportedly collected through stalkerware, was found openly accessible online. While the data traces back to a single infected device, the screenshots reveal interactions with celebrities, influencers, and media figures, highlighting how a breach can ripple outward.

Key takeaways

• An exposed stalkerware database leaked over 80,000 screenshots from a single compromised device linked to a European public figure
• Screenshots capture conversations, context, and everyone involved
• A single breach can unintentionally expose celebrities, influencers, and entire contact networks
• Once exposed, this type of data can be used for targeted scams, impersonation, or fraud

What did the leak contain?

According to the analysis, the exposed database contained 86,859 image screenshots, offering a detailed view of the victims’ private and professional lives.

The data included conversations from messaging apps and social media accounts (Facebook, WhatsApp, Instagram, and TikTok), personal photos, video calls, contact lists, and even business-related documents. Some of the screenshots exposed contact information like phone numbers and emails alongside other identifications.

“Upon further review of the exposed files, I identified that the victim of the spyware is a prominent European celebrity, entrepreneur, and media personality,” Fowler said. “The images capture chat conversations with influencers that have millions of followers, as well as with friends, family, business associates, and others.”

A different kind of exposure

What makes this case particularly troubling is how the data was collected.

Stalkerware is already invasive by design, but incidents like this show how things can escalate.

These tools don’t just collect data; they centralize it. Messages, photos, location data, and more is stored somewhere else, often on poorly secured servers. When those systems are misconfigured or exposed, the damage doesn’t stay contained.

Take this real-life example, where only one device was compromised, but the number of affected individuals is much higher. The captured conversation revealed the private communication of one individual with influencers, celebrities, models, and even “what appeared to be intimate, romantic exchanges” according to the researcher.

What stalkerware can actually do

At its core, stalkerware is a form of spyware used for covert monitoring. It can read messages, track location, access photos, and in some cases, activate the microphone or camera.

It’s often installed by someone with physical access to the device, which makes it particularly dangerous in personal or trust-based situations.

Because it operates quietly in the background, detection isn’t always straightforward.

Warning signs can include unusual battery drain, increased data usage, or a device that suddenly behaves differently. None of these signs are definitive on their own though.

Exposed datasets like this create more than just privacy concerns.

If accessed by malicious actors, the information could be used to build highly convincing scams or impersonation attempts. Attackers don’t need to guess when they already have context, conversations, and relationships mapped out.

They can reference real interactions, impersonate trusted contacts, or craft messages that feel legitimate. For public figures, creators, or professionals, this can quickly turn into account takeovers, reputational damage, or financial fraud.

How to stay safe from this type of exposure and protect against stalkerware or spyware

Staying safe from stalkerware or spyware often starts with the basics. Keep your device updated, avoid installing apps from untrusted sources, and be mindful of who has physical access to your device. Even brief access can be enough to install monitoring software. A trusted security solution that can detect and block spyware is just as important, especially since these threats are designed to hide.

If something feels off, like unusual battery drain or unexpected behavior, it’s worth taking a closer look.

One of the biggest challenges with incidents like this is visibility. Most people don’t know where their data ends up or how much of it is already exposed.

With Bitdefender Digital Identity Protection, you can monitor your digital footprint and receive alerts if your personal information appears in breaches or exposed databases. It gives you a clearer picture of what’s out there and helps you act before things escalate.

For creators and influencers, protecting accounts and devices is just as important. Bitdefender Security for Creators helps safeguard both, reducing the risk of unauthorized access that can lead to incidents like this.