Tile data breach, Life360’s stance, and the steps taken

Everything known about the Tile data breach so far: Tile recently faced a serious data breach that exposed sensitive information of its customers. According to reports from 404 Media, a hacker managed to break into Tile’s internal tools used for handling requests from law enforcement agencies, allowing the hacker to access personal details of Tile users.

“Basically I had access to everything,”

The hacker told 404 Media

Tile data breach: What happened?

A hacker broke into Tile’s, a popular brand known for its Bluetooth trackers, internal tools that are used to help law enforcement find devices. This breach allowed the hacker to access personal information like

• Names
• Addresses
• Emails
• Phone numbers

However, sensitive info like credit card numbers, passwords, and real-time location data weren’t stored on the system that was hacked, so they weren’t stolen.

How did it happen? The hacker got access using credentials from a former Tile employee. They used this access to get into a tool that could look up Tile customers using their phone numbers. Although Tile says the hacker didn’t take actual location data, the hacker claims they could access a lot of information. According to hacker’s stance on 404 media, “This is a major breach,” but “it could have been much more major.”

Personal information such as customer names, addresses, emails, and phone numbers was compromised in the Tile data breach (Image credit)

Tile’s parent company, Life360, is taking the breach seriously. They’re investigating what happened, improving their security, and working with law enforcement. They want to make sure something like this doesn’t happen again. Here is their stance:

“Similar to many other companies, Life360 recently became the victim of a criminal extortion attempt. We received emails from an unknown actor claiming to possess Tile customer information. We promptly initiated an investigation into the potential incident and detected unauthorized access to a Tile customer support platform (but not our Tile service platform). The potentially impacted data consists of information such as names, addresses, email addresses, phone numbers, and Tile device identification numbers. It does not include more sensitive information, such as credit card numbers, passwords or log-in credentials, location data, or government-issued identification numbers, because the Tile customer support platform did not contain these information types.

We believe this incident was limited to the specific Tile customer support data described above and is not more widespread. We take this event and the security of customer information seriously. We have taken and will continue to take steps designed to further protect our systems from bad actors, and we have reported this event and the extortion attempt to law enforcement. We remain committed to keeping families safe online and in the real world.

Sincerely,”

Chris Hulls, CEO

Malicious VSCode extensions: This is an interesting cybersecurity case

What does the Tile data breach mean for you?

If you use Tile products, it’s important to be cautious. Even though Tile says sensitive data wasn’t taken, it’s a good idea to keep an eye on your accounts for any unusual activity. Consider changing passwords and reviewing your account settings for added security.

Tile’s parent company, Life360, confirmed the Tile data breach and initiated investigations into the incident (Image credit)

Tile data breach shows how important it is for companies to protect our personal information. It’s also a reminder for all of us to be careful with our data and to use strong, unique passwords for our online accounts.

While the Tile data breach is concerning, steps are being taken to fix the problem and protect users in the future. Stay informed, stay vigilant, and prioritize your online security to keep your information safe.

Featured image credit: Eray Eliaçık/Bing