You bought a tracker to keep your keys or your kids safe. Now, a hacker knows exactly where they are.

A security breach at Life360, the parent company of Tile, has exposed the internal portal built specifically for law enforcement search warrants. The hacker used the stolen credentials of a former employee to pull physical tracking IDs, residential addresses, and names for millions of users. The tool meant for safety just became a stalker’s dream dashboard.

This is a classic failure of credential lifecycle management. It doesn’t matter how good your app code is if a former staffer still has the keys to the kingdom. Between this and the new discovery of discoverable private links on Claude.ai, the backend architecture of our “private” tools is looking increasingly fragile.

If a product tracks your physical location, its security isn’t optional: it is a safety requirement.


Get the specific details on what data was exposed and how to audit your home internal perimeter.