Unidentified operatives used the fitness-tracking app Strava to spy on the Israel Defense Forces and view their movements to secret bases around the country, reported The Guardian on Tuesday.
The Guardian saw evidence of one user running on a top-secret base believed to be linked to Israel’s nuclear program.
The surveillance campaign was discovered by the Israeli open-source intelligence company FakeReporter.
“We contacted the Israeli security forces as soon as we became aware of this security breach. After receiving approval from security forces to proceed, FakeReporter contacted Strava, and they formed a senior team to address the issue,” said the company’s executive director, Achiya Schatz.
An anonymous user supposedly located in Boston set up fake segments across military installations in Israel. Additionally, the user found a way to bypass Strava’s privacy settings, according to the report.
In a statement, Strava stated: “We take matters of privacy very seriously and have been made aware by an Israeli group, FakeReporter, of a segment issue regarding a specific user account and have taken the necessary steps to remedy this situation.”