Potential Security Breach on Fitbit App

[JohnRR]

This morning I started the Fitbit app on my iPhone to sync my previous days stats only to find a completely different individuals profile being shown rather than my own. I contacted Fitbit via the online chat service and the only advice I was given was to log out of the app and log back in. I did this successfully. However, the agent I chatted with could not offer any explanation as to why this may have happened and could offer no reassurance that it couldn't happen again or that there is the risk that my profile etc. may be viewed by another user in the same way.

Fitbit seemed unconcerned at this apparent security breach.

I have changed my user password (the agent didn't suggest that surprisingly).

Has anyone else experienced this problem please?

[Odyssey13]

Hi @JohnRR  

 I've notified a moderator about this and they should be by to assist you. This copied post is from a moderator and might help you to understand things a bit more.

"An "account takeover", as described in this help article, is a phenomenon that affects many popular online destinations, including Fitbit for many reasons. Fitbit takes very seriously the security of your account and data and my best suggestion is to report any abnormality that you see in your Fitbit account so we can further investigate and help you with that. You can find more information about how to secure your Fitbit account and data here."

[JohnRR]

Hi - thanks for your message. I've also emailed Fitbit so await a response.
Regards,John

[JohnRR]

Hi - thanks for your message. I've also emailed Fitbit so await a response.
Regards,John

[SilviaFitbit]

@JohnRR A warm welcome to the Fitbit Community. Thank you for getting in touch about this. 

@Odyssey13 Thank you for your assistance in the thread! 

I appreciate that you shared your experience with our Support team and the incident that you experienced today.

It's pretty weird that when you logged it showed a different data rather than your own. Since our team has access to your case details please continue the communication through email, they'll further investigate it and provide you with additional information. 

Additionally you could check these articles for more information about privacy: Our Continued Commitment To Data Privacy and Security How can I help secure my Fitbit account and data? 

I'll be around if you have any additional questions. 

[JohnRR]

Many thanks for your reply. I’ll await a response to my email of yesterday in the meantime.

Regards
John

[Matt_Saze]

I had exactly the same issue and I advised the Fitbit support person this was a GDPR breach and needed to be reported to the data commissioner (in the UK). 

[JohnRR]

Absolutely! I was amazed at how complacent the support agent was. They don’t seem to take these things seriously.