World leaders’ secret movements given away by their bodyguards’ fitness apps, French newspaper says

“We do not assess that there were any impacts to protective operations or threats to any protectees,” it added. Locations “are regularly disclosed as part of public schedule releases.”

In another example, Le Monde reported that a U.S. Secret Service agent’s Strava profile revealed the location of a hotel where Biden subsequently stayed in San Francisco for high-stakes talks with Chinese President Xi Jinping in 2023. A few hours before Biden’s arrival, the agent went jogging from the hotel, using Strava which traced his route, the newspaper found.

The newspaper’s journalists say they identified 26 U.S. agents, 12 members of the French GSPR, the Security Group of the Presidency of the Republic, and six members of the Russian FSO, or Federal Protection Service, all of them in charge of presidential security, who had public accounts on Strava and were therefore communicating their movements online, including during professional trips. Le Monde did not identify the bodyguards by name for security reasons.

It said movements trackable on Strava could lead to security breaches, especially when security agents travel in advance to places like hotels where leaders then stay and hold meetings.

Macron’s office said Monday that the consequences of the issues reported by Le Monde “are very slight and in no way affect the security of the President of the Republic.”

Local authorities are aware of Macron’s movements ahead of time and the places where Macron is staying are always fully secure, “so the risk is non-existent,” the statement said.

“A reminder was nevertheless issued to agents by the chief of staff asking them not to use this app,” Macron’s office added.

The Harris campaign deferred comment on the security issue to federal officials. In response to questions posed to the Trump campaign, a spokesperson for the Republican National Committee repeated some of its criticisms of the Biden administration but did not address the vulnerability or how the campaign has responded.

The security risks associated with fitness apps show the need for better regulations on how tech companies can use consumer data, according to Ibrahim Baggili, a computer scientist and professor of cybersecurity at Louisiana State University.

Baggili’s research has exposed how bad actors could use fitness app data to track potential victims — creating risks for stalking, robbery and other crimes.

Consumers often grant app developers the right to use or sell their data when they agree to the terms of service, Baggili said.

“Companies love our data, and we love the product, so we give away the data for free,” he said. “The government really needs to start cracking down on how data can be used and how long it can be retained.”

Identifying the presidential bodyguards — some of them using their full name on Strava — could also help in finding other details about their personal addresses, their families, their movements, and photos they posted on various social media, all of which could possibly be used to put pressure on them for malicious purposes, the report stressed.

— Sylvie Corbet, The Associated Press

AP reporter David Klepper contributed from Washington.