Gravy Analytics Breach Exposes 17TB of Location Data Posted on Russian Forum

1 articles · Updated · Fox News · Oct 14

A hacker posted 17 terabytes of stolen Gravy Analytics data on a Russian cybercrime forum after breaching the location-data broker in January 2025.
Security researchers reviewing a sample found more than 30 million location points, including devices seen at the White House, the Kremlin and military bases worldwide.
The data was reportedly sourced from ordinary apps — including games and dating apps — that shared location and advertising-identifier information into the ad-tech ecosystem.
The breach landed after U.S. regulators had already targeted Gravy Analytics and Mobilewalla in December 2024, and after the FTC later barred Kochava from selling sensitive location data without express consent.
The episode underscores how app permissions and data-broker practices can turn routine phone tracking into a privacy and security risk when sensitive movement records are stolen.