LandAirSea landairsea.com LandAirSea data breach: what happened and what to do
In January 2025, GPS tracking company LandAirSea was breached. About 337,000 customer email addresses leaked with names, usernames, password hashes, partial card data and GPS device identifiers and locations.
View all 13,177 breaches- Breach date
- 12 Jan 2025
- Affected
- 337,373
- Data exposed
- Email addresses, Names, Partial credit card data, Passwords, Physical addresses, Usernames
- Verified
- Yes
- Last updated
Source: Have I Been Pwned (CC BY 4.0)
Reviewed by Anthon Wansland
Head of Product & Co-Founder
Serus is a privacy company with paid tools to find and remove your personal data. This page is free and based on official sources.
What happened
In January 2025, the GPS tracking service LandAirSea suffered a data breach. According to Have I Been Pwned, which added the data on 11 February 2025, the breach exposed 337,373 unique customer email addresses. LandAirSea is aware of the breach and has fixed the underlying vulnerability.
Sources checked: haveibeenpwned.com, consumer.ftc.gov
Last verified against the official page:
What was exposed
Alongside the email addresses came names, usernames and physical addresses. Passwords leaked as hashes, which are scrambled versions of the real thing. Partial card data was in there too: card type, last 4 digits, expiry date. And the breach exposed GPS device identifiers and locations.
What that means for you
Location data is the odd one out. A device ID and a location history can show where a vehicle or person was, so treat it as sensitive. Phishing gets easy with a name, address and email. Think of a fake "your tracker subscription needs updating" message. Hashes can sometimes be cracked, so a reused password is at risk. Partial card data on its own can't buy anything.
What to do
Change your LandAirSea password. Do the same for any account that shares it. Turn on two-factor login. Ignore messages about your tracker or account that arrive out of the blue.
What to do if you were in it
- 1
Change your password, and anywhere you reused it
Change your LandAirSea password, and the password on any other account that uses the same or a similar one. Use a password manager so each account gets a unique one.
- 2
Turn on two-factor login
Use an authenticator app or passkey where a site offers it. It blocks most account takeovers even if a password is already out there.
- 3
Expect phishing that mentions the breach
Your name, address and email leaked together, so messages can look personal. Don't click links or call numbers in unexpected messages. Go to the company's site yourself, and report scam messages at reportfraud.ftc.gov.
- 4
Watch your card statements
Only the card type, last 4 digits and expiry leaked, which isn't enough to make a purchase. Still, check statements for charges you don't recognize and tell your card issuer if you see any, as the FTC advises.
- 5
Check whether your email or phone is in this and other breaches
Run a free Serus scan to see which breaches include your email or phone number. Serus also alerts you when your details show up in a new one.
Timeline
-
The breach happened
-
Added to Have I Been Pwned
Frequently asked
Was I affected by the LandAirSea breach?
If you had a LandAirSea account, possibly. Search your email on Have I Been Pwned or run a free Serus scan to check.
What was exposed?
Email addresses, names, usernames, physical addresses, password hashes, partial credit card data (type, last 4 digits, expiry) and GPS device identifiers and locations.
Should I change my password?
Yes. Change it on LandAirSea and on any other account where you used the same or a similar password.
Has LandAirSea fixed the problem?
Have I Been Pwned says LandAirSea is aware of the breach and has remediated the underlying vulnerability.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
