In a recent advisory, the National Security Agency (NSA) has issued a warning to iPhone and Android users, urging them to disable location tracking on their devices. This recommendation comes in the wake of a significant data breach involving location aggregator Gravy Analytics, which resulted in the theft of sensitive location data from millions of smartphones.
The Gravy Analytics Data Breach
As first reported by 404media, hackers compromised Gravy Analytics, stealing customer lists, industry information, and precise location data harvested from smartphones.
This breach has exposed a trove of sensitive data to the public domain, raising serious privacy and security concerns. According to the Electronic Frontier Foundation (EFF), this data is harvested from apps rather than the phones themselves, through a process called real-time bidding (RTB). RTB not only delivers ads but also fuels government surveillance and poses national security risks.
Apps Involved in the Breach
The breach has revealed a list of apps allegedly hijacked to spy on users’ locations. These include popular apps such as Tinder, Grindr, Candy Crush, Temple Run, Subway Surfers, Harry Potter: Puzzles & Spells, Moovit, My Period Calendar & Tracker, MyFitnessPal, Tumblr, Yahoo Mail, Microsoft 365, Flightradar24, and various religious and pregnancy tracking apps. Even VPN apps, which users download to protect their privacy, were not spared.
Protect yourself, open your phones:
– On Android: Go to Settings < Privacy < Ads < Delete advertising ID
– On iOS: Settings < Privacy & Security < Tracking < Allow Apps to Request To Track pic.twitter.com/audgmZP41P— Baptiste Robert (@fs0c131y) January 8, 2025
NSA’s Recommendations
The NSA emphasizes that location data can reveal detailed information about users’ movements, routines, and associations, posing significant risks. To mitigate these risks, the NSA recommends that users limit app permissions, disable advertising tracking, and regularly reset their advertising IDs.
The agency advises users to set privacy settings to ensure apps are not using or sharing location data unnecessarily and to disable location data usage for apps that do not require it.
The Importance of Disabling Location Tracking
Security researcher Baptiste Robert highlighted the severity of the Gravy Analytics leak, noting that the samples include tens of millions of location data points worldwide, covering sensitive locations such as the White House, Kremlin, Vatican, and military bases.
This data leak is not just a privacy concern but a national security threat. The NSA’s advisory underscores the importance of disabling location tracking to protect personal and national security.
Leave a Reply