The California-based company LocationSmart has been in several headlines lately as reports claim they were involved in a massive selling of sensitive data that potentially exposed real-time location data of mobile users in the United States.
Now, LocationSmart is subjected to aonther unflattering report as KrebsOnSecurity revealed that the company's widely available tool had a bug that possibly leaked sensitive and private location data.
Anyone who knows how to exploit the said bug reportedly had the ability to track a mobile device in real-time even without entering any log-in details or without having to go through a verification process.
Meanwhile, KrebsOnSecurity has informed LocationSmart of the glitch and the latter has since shut down their bugged online service on Thursday, May 17. It is believed that the bug posed a threat to anyone in the United States using the services of major carriers including AT&T, Sprint, T-Mobile, and Verizon.
Security researcher Robert Xiao also helped explain how easy it was to manipulate the bug through LocationSmart’s free demo tool, which the company has been offering as a trial product to its potential customers.
A user can track his own device by entering in the demo tool their name, mobile number, and email address. LocationSmart’s tool, then, forwards a message to the device that contains a request to send data to a cellular tower close to the device. Once permission is granted, the tool collects “approximate longitude and latitude” then maps out the device’s location through Google Street View services.
However, Xiao further explained that the bug in LocationSmart’s demo tool might have allowed someone to bypass the necessary verification process to avoid unauthorized collection of data.
Meanwhile, to test whether the demo tool’s glitch was indeed working, KrebsOnSecurity and Xiao tested it with “five different trusted sources” who gave permission to participate in the experiment. The report further said that Xiao’s methods worked “within a few seconds” and have accurately located all five sources.


Synopsys Q2 FY2026 Earnings Beat Driven by AI and Semiconductor Demand
EU Antitrust Probe Could Lead to Massive Google Fine Under DMA Rules
Kentucky School District Secures $27 Million in Social Media Addiction Lawsuit Settlements
Elon Musk Explores Possible Tesla-SpaceX Merger Amid Growing AI Investments
SK Hynix Joins $1 Trillion Club as AI Chip Demand Fuels Stock Surge
Autodesk Beats Q1 Estimates, Acquires MaintainX for $3.6 Billion
Macquarie Names Five Taiwan AI Stocks Set to Benefit From Data Center Growth in 2026
Marvell Stock Rises After Record Q1 FY2027 Earnings Fueled by AI Demand
Meta AI Push Could Add $26 Billion in Revenue by 2027, Wolfe Research Says
SpaceX IPO Hype Raises Questions as Many Major Stock Debuts Underperform Market
Mega IPOs Like SpaceX and OpenAI Could Reshape S&P 500 and Nasdaq 100 Portfolios in 2026
Samsung Workers Approve Wage Deal, Avoiding Major Strike and Boosting Chip Supply Confidence
SpaceX IPO Could Become Largest in History with $1.8 Trillion Valuation Target
HP Q2 2026 Earnings Beat Expectations Despite Memory Chip Pressure
Snowflake Stock Soars 30% After Q1 Earnings Beat and Major AWS AI Partnership
Dell Raises 2027 Revenue Forecast as AI Server Demand Drives Record Quarterly Results
Morgan Stanley Names Top AI Security and Data Center Stocks for 2026 



