Latitude and longitude pairs leaked: what it means and what to do
Risk level: high. Can you change it: no. Found in 10 breaches in this directory.
What this data is
Precise map coordinates recorded by apps, photos, fitness trackers, delivery services or dating apps, often with a timestamp and sometimes accurate to a single building.
The risk on its own
Coordinates are far more precise than a city or postcode. A handful of timestamped points usually reveals where someone sleeps and works, even without a name attached. Researchers have repeatedly shown that supposedly anonymous location trails can be traced back to individuals.
The risk combined with other data
Linked to your name or account, coordinates become a physical map of your life: home, workplace, your children's school, the gym and places you visit privately, such as a clinic or a place of worship. That is a direct safety risk from stalkers, abusive former partners and burglars. It also exposes visits that reveal health, religion or relationships.
How criminals use it
A stalker uses coordinates from a dating or fitness app to find your home.
An abusive former partner locates your new address from location points recorded after you moved.
Visits to a clinic, place of worship or support service are identified and used to embarrass or threaten you.
Burglars work out the hours you are regularly away from home.
What to do now
Set app location access to While Using or Never: on iPhone open Settings, Privacy and Security, Location Services; on Android open Settings, Location, App location permissions.
Turn off precise location for apps that only need an approximate area.
Delete stored location history: in Google Maps open Your Timeline settings and delete it, and on iPhone clear Significant Locations under Location Services, System Services.
Remove location data from photos before sharing them, or turn off location tagging in the camera app.
If you are at risk from a specific person, contact a family violence service for safety planning, and ask the company that leaked the data exactly what was exposed.
Frequently asked questions
Can coordinates really identify me without my name?
Often yes. The places where a phone sits overnight and during the working day usually point to one household and one workplace.
Which apps collect precise location?
Maps, weather, fitness, dating, delivery, ride share and camera apps are common examples, as are advertising kits built into free apps.
What if I think someone is using this to follow me?
Treat it as a safety issue. Contact police or a family violence service, check your phone for tracking apps and your belongings for unknown Bluetooth trackers, and tighten location sharing.
Breaches that exposed this data
Addi: 2026-03-25, 35M accounts, Age groups, Credit scores, Device information, Email addresses, Government issued IDs, Income levels
iMenu360: 2022-08-11, 3.4M accounts, Email addresses, Latitude and longitude pairs, Names, Phone numbers, Physical addresses
Boulanger: 2024-09-06, 2.1M accounts, Email addresses, Geographic locations, Latitude and longitude pairs, Names, Phone numbers, Physical addresses
James: 2020-03-25, 1.5M accounts, Email addresses, Geographic locations, Latitude and longitude pairs, Passwords
Breach data sourced from Have I Been Pwned, used under CC BY 4.0. Additional breach metadata provided by XposedOrNot. DataExposed is an independent service and is not affiliated with or endorsed by either.