A breach of Gravy Analytics’ huge trove of location data threatens the privacy of millions

TechCrunch reports that Gravy Analytics (merged with Unacast) suffered a cloud breach after a misappropriated key allowed a threat actor to steal several terabytes of location/bidstream data; a sample containing over 30 million location points was posted to a closed cybercrime forum. The dataset includes device location traces from popular apps and reveals visits to sensitive sites (e.g., White House, Kremlin, military bases), enabling deanonymization risks, threats to vulnerable populations, and broader privacy/national-security implications.