The user emo published the following in a hacking forum:
When attempting to login to a life360 account on android the login endpoint would return the first name and phone number of the user, this existed only in the API response and was not visible to the user. If a user had verified their phone number it would instead be returned as a partial number like +1******4830. This endpoint no longer returns phone numbers and now a placeholder number is returned in the API response.
- Date: Mar 2024
- Domain:
life360.com
- Threat Actor: emo
- Category: Social Media & Communication
- Records Announced: 442,519
-
Source:
haveibeenpwned.com
-
Data:
Email Addresses
Names
Phone Numbers
- Imported:
- Records Imported: 443,222
- Number of lines: 443,223
- Size: 27.94 MB
- Passwords:
No
Fields count statistics
Numbers may not be precise, a precision threshold of 100 is used to determine if a field is unique.
Only the top 100 values are displayed in the chart.
Values with less than 100 occurrences are not displayed.