the owner says a hacker has obtained personal information about customers of a Bluetooth tracker brand. Details include names, addresses, email addresses, phone numbers and Tile device ID numbers. Chris Hulls, CEO of Life 360 stolen information does not include credit card numbers, passwords, other login credentials, location data from Tile devices, or government-issued identification numbers.
“Like many other companies, Life360 has recently been the victim of a criminal extortion attempt,” Hulls wrote. “We received emails from an unknown actor claiming to have access to Tile customer data. We immediately began investigating the potential incident and discovered unauthorized access to the Tile customer support platform (but not our Tile service platform).”
Hulls added that Life360 believes the data stolen was limited to customer names, their physical and email addresses and device IDs. “We have taken and will continue to take steps designed to further protect our systems from bad actors and have reported this incident and attempted extortion to law enforcement,” Hulls said. “We are committed to keeping families safe online and in the real world.”
However, the attack appears to go beyond compressing user data. according to 404 Media, the hacker gained access to some of Tile’s internal tools, including those used to process any location data requests sent by law enforcement agencies.
The hacker says they used credentials belonging to a former Tile employee to access customer support systems (Tile said in a separate statement 404 Media that you subsequently disable these credentials). The information they obtained reportedly contained order and return details, along with the payment method customers used. They also had access to tools that let Tile, for example, transfer ownership of a Bluetooth tracker from one email address to another, create administrator accounts, and send push notifications. Hacker said 404 Media they did not use these functions.
This article contains affiliate links; we may earn a commission if you click on such a link and make a purchase.