>>> WERE BACK, WITH A NEW "ROSSEN REPORTS."
"ROSSEN REPORTS."
COULD YOUR FITNESS TRACKER BE
EXPOSING YOUR PRIVATE
INFORMATION TO HACKERS.
>> JEFF ROSSEN TOOK THAT ONE ON.
>> YOU USE THEM?
>> I HAVE ONE RIGHT NOW.
>> SHOWING IT OFF.
GET YOUR 10,000 STEPS IN. SO MANY PEOPLE ARE USING THEM,
WEARABLE DEVICES LIKE SAVANNAH.
AND ALSO, APPS LIKE THIS ONE,
TRACKING YOUR EVERY MOVE, YOUR EVERY MOTION, DOCUMENTING YOUR
HEALTH AND PERSONAL HABITS.
THIS WEEK, THAT FITNESS TRACKERS REVEALED THE SECRET LOCATIONS OF
U.S. MILITARY BASES.
HOW MUCH OF OUR INFORMATION IS
BEING RECORDED?
BEING RECORDED? IF THE MILITARY CAN BE EXPOSED,
HOW VULNERABLE ARE THE REST OF
US?
THIS MORNING, WE HAVE THE
ANSWERS.
THEYRE AMAZING TOOLS TO LOSE WEIGHT.AMAZING TOOLS TO LOSE
WEIGHT.
FITNESS TRACKERS AND APPS, MONITORING OUR STEPS, OUR HEART
RATE, EVEN OUR EXACT LOCATIONS.
ONE OF THOSE APPS, STRAVA, HAS A
HEAT MOPAP SHOWING WHERE MILLION
OF USERS ARE.
JUST DAYS AGO, U.S. TROOPS WERE
EXPOSED.
EXPOSED.
THEY WERE EXERCISING WHILE USING THE APP AND THEIR SECRETLE USING
THE APP AND THEIR SECRET LOCATIONS APPEARED ON THE MAP.
A STUDENT IN AUSTRALIA FIRST
DISCOVERED IT.
DISCOVERED IT.
>> THEY WERE RUNNING UP THEIR
DRIVEWAY.
YOU CAN FOLLOW THE ROUTE FOR A
RUN.
>> Reporter: I DOWNLOADED THE
SAME APP THAT THE TROOPS WERE
USING ON MY PHONE RIGHT HERE. ITS CALLED STRAVA.RIGHT HERE.
ITS CALLED STRAVA. THIS IS IT.
IM WEARING THIS FITBIT IONIC.
VERY POPULAR HERE IN AMERICA.
WHAT DO THE TRACKERS KNOW ABOUT
ME?
ME?
THERES GPS BUILT IN. CAN A HACKER GET THAT
INFORMATION, LEARN ALL ABOUT
EVERY HABIT I HAVE.
TO FIND OUT HERE I AM AT NEWARK
AIRPORT, NEW JERSEY, GOING TO
MEET WITH A SECURITY EXPERT AND
WERE GOING TO SEE WHAT HE CAN
FIND OUT ABOUT ME.
THE NEXT DAY, IM ALL OVER
CHARLOTTE.
CHARLOTTE.
MY FITNESS TRACKER IS RECORDING.
I HAVE THEM CALLED UP.
FITBIT KNOWS IM AT THE MIDNIGHT DINER. KNOWS IM AT THE MIDNIGHT
DINER.
LET ME SWITCH OVER TO STRAVA.
STRAVA DOES, TOO. MIDNIGHT DINER, RIGHT THERE.
OFF AGAIN, THE TRACKERS
FOLLOWING ALONG.
FOLLOWING ALONG. THATS A BANK ATM, PULLING OUT
MONEY.
MONEY.
TAKING A WALK ON A BEAUTIFUL DAY
HERE AT FREEDOM PARK.
ON ITS WEBSITE, FITBIT
ACKNOWLEDGES IT COLLECTS YOUR
DATA.
IT CAN SHARE YOUR NAME, E-MAIL
OR ADDRESS, UNDER EXTREMELY LYLY
LIMITED CIRCUMSTANCES.
IF A HACKER WERE TO BREACH THIS
SYSTEM OR ANY OTHERS ON THE MARKET, YOUR INFORMATION COULD
BE COMPROMISED.
BE COMPROMISED. THATS WHAT CYBER SECURITY JEFF
POLLARD IS TRYING TO DO TO MY
ACCOUNT, HOLED UP IN THIS HOE
LEL ROOM
LEL ROOM HOTEL ROOM.
HOTEL ROOM. >> LOOKS LIKE YOU FLEW OUT OF
NEWARK AIRPORT, LAST NIGHT, TO
CHARLOTTE.
CHARLOTTE.
IS THAT RIGHT? >> Reporter: YEAH.
>> LOOKS LIKE YOU ONLY GOT ABOUT
FIVE HOURS SLEEP LAST NIGHT.
>> Reporter: HOW DO YOU KNOW
THIS?
THIS?
>> BECAUSE I HAVE ACCESS TO YOUR FITBIT ACCOUNT.VE ACCESS TO YOUR
FITBIT ACCOUNT. I COMPROMISED IT.
EVERYTHING YOU RECORDED I HAVE
ACCESS TO.
ACCESS TO.
>> Reporter: HOW DID HE DO IT?
EASY.
HE SENT ME THIS FAKE FISHING
E-MAIL, FROM FITBIT SERVICES, ASKING ME TO LOG IN, A COMMON
HACKER TACTIC.
HACKER TACTIC. WHEN I DID, BOOM, HE HAD FULL
ACCESS.
ACCESS.
>> AROUND 8:00, 9:00 THIS
MORNING, YOU WENT TO A BANK. >> Reporter: WHICH BANK?ANK.
>> Reporter: WHICH BANK? >> BANK OF AMERICA.
AND YOU DID SOME SIGHTSEEING.
WENT DOWN TO FREEDOM PARK NEAR
THE WATER.
THE WATER. >> Reporter: THAT IS CREEPY.
HOW IS THIS DANGEROUS?
>> I KNOW WHEN YOU WORK, WHEN YOURE AT HOME, WHEN YOU TAKEN
YOURE AT HOME, WHEN YOU TAKE YOUR KIDS TO SCHOOL.
THAT CREATES A RECIPE FOR SIBLER
STALKING.
STALKING.
NOW, I HAVE A BREEDING GROUND
FOR CRIMINAL ACTIVITY ON TOP OF
STALKING.
>> Reporter: FITBIT SAYS IT ONLY
SHARES PERSONAL DATA AT USERS
REQUEST, TO PARTNERS THAT
PROVIDES SERVICES.
ALSO SAYING, ITS COMMITTED TO
PROTECTING THE PRIVACY AND
SECURITY OF OUR USERS.
STRAVA DIDNT COMMENT.
>> THE BOTTOM LINE IS, THESE
DEVICES ARE USEFUL.
BUT THEY CAN BE USED FOR EVIL
AND WE HAVE TO BE AWARE OF THAT. >> BY THE WAY, STRAVA AND FITBIT
HAVE A PRIVACY SETTING YOU CAN
OPT OUT OF.
THE FIRST THING YOU SHOULD DO
WHEN YOU BUY ONE OF THE DEVICES
OR APPS, GET ON THAT SETTING AND
CLICK ON PRIVATE.
AND WE HAVE MORE TIPS ON HOW TO KEEP YOUR PERSONAL INFORMATIONO
KEEP YOUR PERSONAL INFORMATION PERSONAL AND SAFE ON OUR WEB
SITE, RIGHT NOW,
TODAY.COM/ROSSENREPORTS.
TODAY.COM/ROSSENREPORTS. >> THATS CREEPY.
>> IT KNOWS WHERE YOU ARE.