Life360 says hacker stole Tile customer data and tried to extort the company

Life360, the location-sharing company that announced its acquisition of Bluetooth tracker maker Tile in November 2021 and completed it in January 2022, said on 11 June 2024 that an unauthorised party had accessed a Tile customer support platform and then attempted to extort the company.

Life360 said it began investigating after receiving emails from an unknown actor claiming to hold Tile customer information and demanding payment. The investigation confirmed unauthorised access. According to 404 Media, which first reported the breach and reviewed samples of the stolen material, the intruder had obtained login credentials for a Tile administrative system that were believed to belong to a former employee.

The company said the affected information consisted of customer names, physical addresses, email addresses, phone numbers and Tile device identification numbers. It said credit card numbers, passwords, login credentials, location data and government identification numbers were not exposed, because the support platform did not store them. Reporting indicated the intruder also reached internal tools used to handle location data requests from law enforcement, though Life360 maintained that no location data was taken.

Life360 said it had disabled the compromised credentials, blocked further access, taken additional steps to protect its systems, and reported both the intrusion and the extortion attempt to law enforcement. It advised customers to watch for suspicious activity on their Tile accounts. The company did not publish a figure for how many people were affected, and it did not respond to the extortion demand.