Pentagon warns US forces after fitness trackers reveal locations

Routes of some activities recorded on the Strava fitness app in Berlin, Germany. The global map published by the company shows users’ movements and is said to expose data about military bases and personnel, including those of US forces in Iraq and Syria. PHOTO: NYTIMES

WASHINGTON (REUTERS) -US Defense Secretary Jim Mattis has ordered a review of security protocols, officials say, after fitness tracking devices broadcast patterns of movement at military facilities around the world, including in war zones.

Nathan Russer, a student at the Australian National University in Canberra, drew attention to data when he wrote on Twitter about the images after stumbling upon GPS tracking company Strava's Global Heatmap.

"Once you look at Syria, you can see a bunch of bright spots," Russer said.

His discovery prompted others to scour the heat map, turning up other possible locations of US and other mostly Western personnel who typically use high-tech fitness devices, including elsewhere in the Middle East and in Africa.

Although many of the bases cited by Russer and others are well-known outposts that host US and US-backed personnel, there are clear risks that such tracking devices pose, potentially disclosing not just the broad locations where foreign troops operate but the routes they travel.

There is also the risk that Strava itself could become a target of nations trying to mine its data to discover identifiable information about who was wearing the devices.

Jim Lewis, a cyber expert at the Center for Strategic and International Studies, said fitness trackers were just one way that all mobile wireless technology can undermine operational security and give adversaries an edge.

"The Russians are pretty good at this and there are ways to combine the data from trackers with social media profiles," Lewis said. "Social networks are the bane of operational security."

The Department of Defence (DOD) said it encourages all defence personnel, wherever they are, to limit their public presence on the Internet. That guidance is even more strict when troops operate in sensitive locations.

But officials said Mattis was aware of the issue and had ordered a review.

"DOD takes matters like these very seriously and is reviewing the situation to determine if any additional training or guidance is required," the Pentagon said in a statement, without directly confirming that US troops had used the fitness trackers.

The Pentagon also said it was considering whether additional steps needed to be taken "to ensure the continued safety of DOD personnel at home and abroad".

Pentagon spokesman, Colonel Robert Manning, told reporters at a news briefing he did not know of any instances in which US base security had been compromised as a result of the mapping.

Join ST's Telegram channel and get the latest breaking news delivered to you.