Malwarebytes
Tile trackers plagued by weak security, researchers warn
Researchers from Georgia Institute of Technology scrutinised the security of Tile trackers and warned that they are vulnerable to persistent tracking. The article notes that about 88 million Tile trackers are in use worldwide, and the main flaw is that Tile broadcasts an unencrypted, static MAC address and unique ID. While other trackers rotate IDs to hinder long‑term tracking, Tile transmits the same MAC address even as it rotates the ID, making continuous tracking easier.
The receiver can then send the tag’s location, MAC address, and unique ID to a server without encryption, and researchers believe the data may be stored in cleartext. The piece also highlights concerns about Life360’s stated capabilities and contrasts Tile’s weaker anti‑stalking features, including a manual in‑app scan and a requirement for users to be moving for it to work.
It notes that a redesign or encryption of signals could address many of these issues, and it mentions a February 2025 Find My vulnerability as further context for ongoing tracking risks. according to Georgia Institute of Technology