Hacker Breaches Tile Device Tracker Systems, Stealing Customer Data

https://icaro.icaromediagroup.com/system/images/photos/16253514/original/open-uri20240612-18-nbw3q?1718232686
ICARO Media Group
Politics
12/06/2024 22h46

A recent breach in the systems behind Tile device trackers has resulted in the theft of customer data, including personal information such as names, addresses, emails, and phone numbers. According to 404 Media, a hacker was able to access this data by exploiting a tool used to respond to law enforcement requests regarding Tile trackers.

Life360, the company that owns Tile, confirmed the breach through a statement by CEO Chris Hulls. Hulls revealed that the stolen data included Tile tracker IDs, and that the hacker attempted to extort the company. Life360 promptly reported the incident to law enforcement authorities.

Although the stolen information did not comprise precise Tile location data, concerns were raised about the breach's potential impact on affected customers. The company has not yet indicated whether they will be reaching out to inform those affected by the breach.

In an email response to The Verge, Hulls stated that "from what I gather, very little was accessed". Furthermore, Life360 representative Kristi Collura clarified that the tool accessed by the hacker, as shown in the screenshots provided by 404 Media, was actually a part of the process for responding to law enforcement requests, rather than a tool used directly by law enforcement.

The hacker reportedly gained access to the systems using login credentials that were allegedly associated with a former Tile employee. Screenshots provided by the hacker indicated that they had access to several internal tools, including those for transferring ownership of Tile trackers, adding admin accounts, and sending messages to Tile users.

Life360 is actively cooperating with law enforcement authorities in their investigation into the breach, and Collura stated that there are currently no further updates on the matter.

Correction: It is important to note that an earlier version of this article incorrectly stated the nature of the Life360 tool that was accessed. The tool in question is used as a part of the process to respond to law enforcement requests, rather than being a tool directly used by law enforcement.

As the investigation unfolds, affected Tile customers will be eagerly awaiting further information regarding the protection of their personal data and any necessary measures that Life360 will take to address this breach.

The views expressed in this article do not reflect the opinion of ICARO, or any of its affiliates.

Related