Spyware Maker Conviction Sets U.S. Criminal Precedent After a Decade

The U.S. Department of Justice secured its first successful prosecution of a commercial spyware maker since 2014, convicting Bryan Fleming, founder of pcTattletale, for creating and selling spyware intended for unlawful surveillance. Although Fleming received a lenient sentence of time served and a $5,000 fine, the conviction establishes a prosecutorial precedent that raises the legal risk for stalkerware operators in the U.S. This case signals a shift in enforcement, providing investigators and prosecutors with a clear evidentiary framework to pursue similar cases. The ruling changes the threat model for spyware vendors, who now face demonstrable criminal liability beyond civil and platform-based consequences. The light sentence may temper immediate deterrence but does not diminish the significance of this legal milestone. This development is a critical inflection point for policymakers, victim advocates, and platform trust-and-safety teams monitoring the spyware market.

Part of the PlainSec briefing for 2026-04-07

Sources