Skip to content
Who's Tracking You? The Shocking Gravy Analytics Data Breach episode artwork

Feb 6, 2025 11 min

Who's Tracking You? The Shocking Gravy Analytics Data Breach

from Upwardly Mobile - API & App Security News Hosted by Skye MacIntyre

Massive Location Data Breach at Gravy Analytics: Millions at Risk Episode Summary: This episode discusses the recent data breach at Gravy Analytics, a major player in the location data industry. Hackers claim to have stolen a large amount of sensitive data, including customer lists, industry information, and precise location data harvested from smartphones1. This breach has potentially exposed the private information of millions of people worldwide2. The implications of this breach are significant, raising concerns about deanonymization risks, tracking, and the potential sale of bulk location data on underground markets3. Discussion Points: • The Hack: Gravy Analytics, the parent company of Venntel, which sells smartphone location data to the U.S. government, was reportedly compromised by hackers1. • Data Stolen: The stolen data includes customer lists, industry information, and precise location data from smartphones1. • Potential Harms: The breach could lead to the deanonymization of individuals, increased tracking, and the sale of sensitive data on underground markets3. • Government Use: Gravy Analytics and Venntel have been accused of illegally collecting and selling Americans' location data, with some tracked individuals monitored near sensitive locations such as government buildings and health clinics4.... • Ransom and Cover-Up: Hackers posted a gigabyte of data on a Russian-language cybercrime forum and threatened to release more unless a ransom was paid6.... The removal of the post has led to suspicions that Gravy Analytics may have complied with the ransom demand7.... • Lack of Transparency: Unacast, Gravy Analytics' parent company, has not publicly acknowledged the breach in America but has disclosed it to data protection authorities in Norway5.... • In-App Data Collection: A single app installed on a phone was observed sending numerous requests, some to Unity, including geolocation data even when location services were disabled for all apps9. • Data Sharing: Location, IP address, and other data points are shared with third parties like Unity, Moloco Ads, and Facebook, even without explicit user consent10.... • Data Broker Marketplaces: Data marketplaces like Datarade offer access to vast amounts of location data, including possibilities to acquire personal info13.... Links to Sources: • 404 Media: https://www.google.com/url?sa=E&q=https%3A%2F%2F404media.co%2Fhackers-claim-massive-breach-of-location-data-giant-threaten-to-leak-data%2F • Straight Arrow News: https://www.google.com/url?sa=E&q=https%3A%2F%2Fwww.straightarrownews.com%2Finternational%2F8121889%2Fmillions-of-americans-location-data-compromised-in-apparent-hack • Tracking Myself Down Through In-App Ads: https://www.google.com/url?sa=E&q=https%3A%2F%2Ftimsh.org%2Feveryone-knows-your-location-tracking-myself-down-through-in-app-ads This content was created in partnership and with the help of Artificial Intelligence AI.

Episode details come from the podcast's RSS feed.

Embed this episode

Ready to play

Who's Tracking You? The Shocking Gravy Analytics Data Breach

0:00 11:18

No transcript yet.

Requests help us decide what to transcribe next.

Frequently asked questions

How long is this episode of Upwardly Mobile - API & App Security News?

This episode is 11 minutes long.

When was this Upwardly Mobile - API & App Security News episode published?

This episode was published on February 6, 2025.

Is there a transcript available for this episode?

Yes, a full transcript is available for this episode. You can read the complete transcript on the episode page.

Can I download this Upwardly Mobile - API & App Security News episode?

Yes. Use the download control on the episode player to save the publisher-provided media file.