A significant data breach has compromised the sensitive location information of millions of smartphone users who utilize popular apps, including dating platforms, gaming apps, email clients, and even a period tracking app. The breach occurred when a hacker managed to infiltrate Gravy Analytics, a data broker that aggregates and sells location data from various apps on iOS and Android devices. The hacker was able to access data that includes precise location details, potentially revealing users’ home addresses, workplaces, and other personal movements. While iOS users may have been partially protected due to a privacy feature introduced in iOS 14.5, the breach still affected many devices across both platforms.
Gravy Analytics, which collects and monetizes location data, was targeted through a “misappropriated key” that allowed the hacker to gain access to the company’s cloud-based storage. The incident occurred on January 4, but the full scale of the breach remains unclear, as the company’s disclosure to Norwegian authorities provided limited details. The data compromised in the breach consists of extensive customer lists and real-time location tracking, which provides insight into the precise movements of individuals. The data affected includes smartphone data from millions of users, posing significant privacy concerns.
The leaked data, according to Baptiste Robert, the CEO of Predicta Lab, contains “tens of millions of location data points,” including sensitive locations such as military bases, the Kremlin, the White House, and the Vatican. This revelation highlights the extent of the breach and the level of detail that the stolen data contains. The breach not only exposes personal privacy but also raises security concerns, especially with the targeting of sensitive locations like government buildings and military sites.
This breach serves as a stark reminder of the vulnerabilities associated with the collection and storage of location data by third-party companies. While users may not always be aware of the extent to which their movements are being tracked, this incident underscores the risks involved in the widespread sharing of personal information by popular apps. As the investigation into the breach continues, it remains crucial for companies to implement stronger security measures and for users to stay vigilant about the permissions they grant to apps on their devices.