Gravy Analytics, a major location data broker, recently disclosed a data breach that may have exposed precise location information of millions of individuals. The breach, identified on January 4, 2025, involved unauthorized access to the company’s AWS cloud storage. A sample of the leaked data, shared on a Russian forum, contained over 30 million location points, including sensitive sites like the White House and military bases.
Gravy Analytics is investigating the breach to determine its scope and whether personal data was compromised. Preliminary findings suggest that if personal data is involved, it likely pertains to users of third-party services that supply data to Gravy Analytics.
This incident coincides with recent regulatory scrutiny. In December 2024, the Federal Trade Commission (FTC) filed a complaint against Gravy Analytics and its subsidiary, Venntel, for unlawfully collecting and selling user location data without consent, including data related to sensitive locations.
The breach underscores ongoing concerns about privacy and the security of personal data handled by data brokers. It highlights the potential risks associated with the collection and sale of location information, especially when such data can reveal sensitive or personal aspects of individuals’ lives.
From what I have read, if you had Apple’s “Allow Apps to Request to Track” off, you SHOULD be good. But I would have to look into it more.