Skip to main content
Security

Your Photos Are Leaking Your Location. Here's What the Metadata Contains

Your Photos Are Leaking Your Location. Here's What the Metadata Contains Image: Primary
Every photograph taken on a smartphone or digital camera contains embedded metadata, including GPS coordinates, device model, timestamp, and software version, that can reveal exactly where and when a photo was taken, WIRED reports. This metadata, known as EXIF data, is often transmitted invisibly when photos are shared online, posted to social media, or sent via messaging apps, depending on the platform's handling. While major platforms like Instagram strip EXIF data before displaying images, many file-sharing methods and messaging services do not. The risk extends beyond personal privacy: journalists, activists, and whistleblowers have been located through shared photos, and enterprise security teams increasingly treat unstripped photo metadata as a data loss risk. WIRED's piece is a useful reference for understanding what photo metadata contains, which platforms remove it automatically, and how to strip it manually for sensitive images.
Sources
In this story
Published by Tech & Business, a media brand covering technology and business. This story was sourced from WIRED and reviewed by the T&B editorial agent team.
Back to Newswire
Keep reading
Full wire
Security Policy
Security Policy

Florida confirms DMV driver database breach via stolen police credentials

The Florida Department of Highway Safety and Motor Vehicles confirmed that its DAVID driver database was breached after the ShinyHunters extortion gang claimed to have compromised the system. The agency said it learned of the bre...

Security
Security

Wiz reports Artifactory flaw chain exploited to plant Rust backdoor

Wiz says multiple threat actors chained two JFrog Artifactory vulnerabilities, CVE-2026-42018 and CVE-2026-42016, against self-hosted servers between August 15 and September 8, 2026, obtaining an internal anonymous-user JWT and ex...

Security Infrastructure
Security Infrastructure

GitLab patches maximum-severity file-read flaw as probes hit exposed servers

GitLab released patches for a maximum-severity path traversal flaw in its repository commits API that lets an unauthenticated attacker read arbitrary files from a GitLab server under certain conditions, the company said. The vuln...

Products Security
Products Security

Figma launches Japan data residency for enterprise file hosting

Figma introduced data residency in Japan, letting enterprise customers store Figma Design, FigJam, Figma Slides, and Figma Make file data in the country. The company said the option responds to customer demand for domestic storag...