Founder of spyware maker pcTattletale pleads guilty to hacking and advertising surveillance software

The founder of a U.S.-based spyware company whose products enabled customers to monitor the phones and computers of unsuspecting victims has pleaded guilty to multiple federal charges related to his operation.

Bryan Fleming, the founder of pcTattletale, entered a guilty plea Tuesday in federal court in San Diego. He admitted to charges related to computer hacking, the sale and promotion of surveillance software for illegal purposes, and conspiracy.

The plea follows a multi-year investigation led by Homeland Security Investigations (HSI), a division of U.S. Immigration and Customs Enforcement. HSI began examining pcTattletale in mid-2021 as part of a broader crackdown on consumer surveillance software, commonly referred to as stalkerware.

This marks the first successful federal prosecution of a stalkerware operator in the United States in more than a decade. The last comparable case occurred in 2014, when the creator of the spyware app StealthGenie was indicted and later pleaded guilty. Fleming’s conviction could set a precedent for further investigations not only into spyware developers, but also into those who market and sell covert surveillance tools.

HSI said PC Tattletale is among several stalkerware services currently under investigation. Representatives for ICE and the U.S. Attorney’s Office for the Southern District of California did not immediately respond to requests for comment. Fleming’s attorney, Marcus Bourassa, also did not respond.

pcTattletale operated as a remote monitoring application controlled by Fleming since at least 2016. Like other stalkerware tools, it allowed consumers to track individuals secretly — often romantic partners or spouses — without their consent, which is illegal in the United States and many other countries.

Once installed on a target’s device, typically using knowledge of a passcode or login credentials, the software continuously uploads data such as messages, photos, and location information to pcTattletale’s servers. That information was then made available to whoever installed the spyware.

Fleming shut down pPC Tattletalein 2024 following a significant data breach in which a hacker defaced the company’s website and stole large volumes of data from its servers. The breach exposed sensitive information belonging to both customers and their victims. Data from more than 138,000 customers was later shared with breach notification service Have I Been Pwned.

At the time, Fleming told TechCrunch that pcTattletale was “out of business and completely done,” stating that the company’s servers had been wiped. However, federal authorities were already well into their investigation by then.

Federal investigation and home search

HSI launched its investigation into pcTattletale in June 2021 after identifying more than 100 stalkerware websites selling surveillance tools. While many of those sites claimed legitimate uses, such as monitoring children or employees, pcTattletale drew particular attention for openly advertising its software as a means to spy on spouses and partners secretly.

That marketing approach was highlighted in a 2022 affidavit written by HSI special agent Nick Jones in support of a search warrant for Fleming’s home. The affidavit, unsealed in December 2025 ahead of Fleming’s plea hearing, stated that Fleming was believed to be operating pcTattletale from his home in Bruce Township, Michigan, placing him firmly within U.S. jurisdiction.

Unlike many stalkerware operators who conceal their identities, Fleming openly promoted pcTattletale. He appeared in YouTube videos filmed at his home, identifying himself as the product’s creator and founder.

According to court records, investigators obtained a warrant in 2022 to search Fleming’s email accounts. The emails allegedly showed that Fleming knowingly assisted customers who wanted to spy on non-consenting adults. Agents later conducted surveillance to confirm Fleming’s identity and location.

Jones also went undercover as an affiliate marketer, offering to promote pcTattletale in exchange for a share of revenue. During that exchange, Fleming provided promotional images intended for ads encouraging users to “catch a cheater,” reinforcing investigators’ belief that the software was being marketed for illegal surveillance.

By November 2022, a federal judge authorised a search of Fleming’s home. Agents executed the warrant soon afterwards, seizing multiple items. Authorities also obtained banking and PayPal records that show transactions totalling more than $600,000 by the end of 2021.

The warrant was initially sealed due to concerns that Fleming might destroy evidence. Public records show Fleming later sold the home for $1.2 million.

Impact and reaction

Privacy advocates hailed the guilty plea as a significant step forward in efforts to combat stalkerware.

Eva Galperin, director of cybersecurity at the Electronic Frontier Foundation and co-founder of the Coalition Against Stalkerware, said the case highlights how openly such companies often operate.

“One of the most striking aspects of this case is how stalkerware companies like pcTattletale function in plain sight,” Galperin said. “That’s largely because the people behind them rarely face consequences for selling tools explicitly designed to spy on others without their consent.”

She added that she hopes the case will deter others from operating similar services.

Fleming is expected to be sentenced later this year.

If you or someone you know needs help, the National Domestic Violence Hotline (1-800-799-7233) offers free, confidential support 24/7. If you believe your phone may be compromised by spyware, the Coalition Against Stalkerware provides resources and guidance.