Friday, May 18, 2018

Carlsbad Company Leaked Location Data For Every Mobile Customer In The US

A major, security leak by a Southern California company, which revealed the location of every single mobile phone customer in the United States to within a couple of hundred feet, was exposed on Thursday--raising questions to how cell phone users data is being used and sold by mobile carriers. A Carlsbad company, LocationSmart, was revealed to have been uniwttingly sharing the real-time location of mobile phone carriers via a bug in its web site, without the need for a password or any other form of authentication or authorization. The bug, detailed by KrebsOnSecurity, allowed anyone who understood the open API of LocationSmart's web site to reveal the location of any AT&T, Sprint, T-Mobile, or Verizon phone in the United States. The service was taken offline yesterday.

---