Latest in Gear

Image credit:

LocationSmart reportedly leaked phone location data onto the web

Oops.
Rob LeFebvre, @roblef
May 17, 2018
Share
Tweet
Share

Sponsored Links

Getty Images/Blend Images

It's starting to feel like everyone in charge of our sensitive data might be incompetent. It's only been a day since Securus, the company that helps police track phones, was apparently hacked. Now, according to security site KrebsOnSecurity, tracking firm LocationSmart leaked real-time location data on its own web site.

LocationSmart aggregates real-time data on the location of subscribers' mobile phones. It's all opt-in, but Krebs reported that anyone could access this information for any AT&T, Sprint, T-Mobile and Verizon phones on the company's web site without a password or any other form of authentication. The vulnerability has been taken offline, said Krebs, but man what a mistake.

While LocationSmart customers gave their consent to have the company track their phones' location, they likely did not want anyone to know that information. The issue was initially found by Robert Xiao, a PhD candidate at Carnegie Mellon University. ""I stumbled upon this almost by accident, and it wasn't terribly hard to do," he said. "This is something anyone could discover with minimal effort. And the gist of it is I can track most peoples' cell phone without their consent."

LocationSmart Founder and CEO Mario Proietti told Krebs, "We don't give away data. "We make it available for legitimate and authorized purposes. It's based on legitimate and authorized use of location data that only takes place on consent. We take privacy seriously and we'll review all facts and look into them."

Verizon owns Engadget's parent company, Verizon Media. Rest assured, Verizon has no control over our coverage. Engadget remains editorially independent.

All products recommended by Engadget are selected by our editorial team, independent of our parent company. Some of our stories include affiliate links. If you buy something through one of these links, we may earn an affiliate commission.
Comment
Comments
Share
Tweet
Share

Popular on Engadget

The 2020 Engadget Holiday Gift Guide

The 2020 Engadget Holiday Gift Guide

View
The best laptop deals we found for Cyber Monday

The best laptop deals we found for Cyber Monday

View
The best Cyber Monday tech deals that are worth your money

The best Cyber Monday tech deals that are worth your money

View
Apple's MacBook Air M1 drops to $899 for Cyber Monday

Apple's MacBook Air M1 drops to $899 for Cyber Monday

View
Volkswagen may release a small EV for as little as $24,000

Volkswagen may release a small EV for as little as $24,000

View

From around the web

Page 1Page 1ear iconeye iconFill 23text filevr