Founder of spyware maker pcTattletale pleads guilty to hacking and advertising surveillance software

The founder of a U.S.-based spyware company, whose surveillance products allowed customers to monitor the phones and computers of unsuspecting victims, pleaded guilty to federal charges connected to his extensive operation. Bryan Fleming, the founder of pcTattletale, entered a guilty plea in a San Diego federal court on Tuesday. He was charged with computer hacking, selling and advertising surveillance software for illegal purposes, and conspiracy. This case followed a multi-year investigation by agents with Homeland Security Investigations (HSI), a branch of U.S. Immigration and Customs Enforcement. HSI started investigating pcTattletale in mid-2021, as part of a broader probe into the consumer-grade surveillance software, also known as stalkerware.
This is the first successful U.S. federal prosecution of a stalkerware operator in over a decade. The last such prosecution was in 2014, with the indictment and guilty plea of the creator of StealthGenie, a phone surveillance app. Fleming’s conviction could lead to more federal investigations and prosecutions of individuals operating spyware or those who simply advertise and sell covert surveillance technology. HSI has stated that pcTattletale is only one of several stalkerware websites currently under investigation.
Zhvilimi i hetimeve dhe ndalimi i pcTattletale
A spokesperson for ICE did not immediately respond to requests for comment. Similarly, Kelly Thornton from the U.S. Attorney’s Office, which brought charges against Fleming, declined to comment. Fleming’s lawyer, Marcus Bourassa, did not provide a statement on Tuesday. pcTattletale was an app under Fleming’s control since at least 2016. These types of apps allow regular consumers to buy software that can track people and their data without consent, including romantic partners or spouses. This is illegal in the United States and in many countries.
Once physically installed on a victim’s device—typically needing the victim’s passcode—the app would continue uploading copies of messages, photos, and location data to pcTattletale servers. This data became accessible to whoever planted the spyware. Fleming shut down pcTattletale in 2024, following a major data breach where a hacker not only defaced the company’s website but also stole large amounts of personal information from its servers. Over 138,000 customers were affected, with their data shared with Have I Been Pwned, a data breach notification site. Fleming later told the media that the company was “out of business and completely done” after deleting all its data.
Despite this, federal agents continued their investigation into Fleming’s illegal business activities.
Hetimet federale dhe ndjekja penale
HSI began examining pcTattletale in June 2021, after discovering over 100 stalkerware websites. Many advertised “legal” uses, such as monitoring children or employees. However, pcTattletale distinguished itself by openly promoting its spyware for spying on spouses and partners. This finding was made explicit by HSI special agent Nick Jones in a 2022 affidavit supporting a search warrant for Fleming’s home. The affidavit was unsealed ahead of Fleming’s plea hearing.
Crucially, Fleming operated pcTattletale out of his home in Bruce Township, Michigan, which made it accessible to U.S. law enforcement—unlike many stalkerware operators based overseas. While many in this industry hide their identities to avoid legal risks, Fleming openly promoted pcTattletale as its creator in YouTube videos filmed at his house. HSI agents obtained a warrant in 2022 to search Fleming’s email accounts and found messages confirming he knowingly helped customers wanting to spy on unsuspecting, non-employee adults.
Agents later surveilled Fleming’s Michigan home for further evidence. Special agent Jones even went undercover, posing as an affiliate marketer. Through email exchanges, Fleming sent banner ads promoting the spyware as a tool to catch cheating spouses, thus making his intentions clear.
By November 2022, HSI received judicial approval to search Fleming’s home. Federal agents raided the property, seizing an unknown number of items and obtaining bank records. Fleming’s accounts showed transactions exceeding $600,000 by the end of 2021. The warrant was filed under seal due to concerns Fleming might destroy or tamper with evidence. Public records show Fleming sold his house for $1.2 million.
Fleming’s conviction is seen as a victory for privacy advocates. Eva Galperin, cybersecurity director at the Electronic Frontier Foundation, commented that stalkerware companies like pcTattletale usually operate in the open because the people behind them rarely face consequences. She expressed hope that this case changes the risk calculation for stalkerware creators. Fleming is expected to be sentenced later this year.
If you or someone you know needs help, the National Domestic Violence Hotline (1-800-799-7233) provides 24/7 free and confidential support to victims of abuse. In emergencies, call 911. The Coalition Against Stalkerware offers resources if you suspect your phone has been compromised.
Tags: pcTattletale, stalkerware, spyware, Bryan Fleming, hakim, privatësia
