Life360 data breach: 442K accounts exposed
Severity: medium · Patch status: no-fix-needed · Since 2024-07-20
In July 2024, data scraped from a misconfigured Life360 API was posted online after being obtained several months earlier. The records included 443k unique email addresses and in most cases, corresponding names and phone numbers (some records were null or obfuscated). Life360 promptly notified impacted users after the incident was discovered. Exposed data: email addresses, names, phone numbers. The breach dates from Mar 1, 2024; Have I Been Pwned loaded it on Jul 20, 2024.
What to do
- If you had a Life360 account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch