WELLINGTON, NEW ZEALAND / RankWire.AI / – Public activity data from Strava has uncovered the routines and locations associated with hundreds linked to New Zealand Defence Force. An analysis identified 565 Strava profiles that logged activity at NZDF bases and camps since January, of which 488 were publicly accessible, revealing full activity histories to other users. Investigators, however, could not verify that every account belonged to NZDF personnel, although most profiles displayed at least one indicator of military service.
The recorded activities spanned major defence sites including Whenuapai, Devonport, Ohakea, Linton, Burnham, Waiouru, and Woodbourne. Some users tracked workouts within Papakura Military Camp, home to the New Zealand Special Air Service, while others recorded activities at the nearby Ardmore training area. Publicly visible segments appeared at defence locations, featuring names connected to base routes and fitness tests. Since 2018, some segment leaderboards have displayed user names.
Overseas activity extended the exposure to locations beyond New Zealand, with users recording workouts across 13 countries and territories, such as Australia, the United States, South Korea, Japan, Britain, Egypt, the Philippines, Fiji, and the Cook Islands. Movements between New Zealand bases and international military sites appeared on profiles, creating public records that linked individuals to specific places and travel patterns, including activity in Antarctica.
Public data exposes detailed military routines
Strava’s platform allows users to log and share runs, rides, and various workouts via GPS, with public segments often featuring leaderboards for popular routes. The investigation uncovered 41 public segments at defence-related sites, where even some private profiles appeared by name on leaderboards. In at least 30 instances, those names connected activity across multiple military locations, while linked accounts or tagged activities revealed family ties in 13 cases.
Profiles went beyond location data, with users posting photos, videos, and workout titles linked to military training at locations like Waiouru and other training zones. Some profiles displayed workouts near overseas bases and diplomatic facilities, including a senior NZDF member who posted activity under a real name while serving in the United States. That profile showed movements involving several military sites as well as runs close to New Zealand’s embassy in Washington.
NZDF issues guidelines on fitness tracking dangers
The NZDF has issued warnings to personnel about the risks associated with fitness-tracking apps and social media. Its guidance recommends disabling fitness tracking in sensitive areas and avoiding the use of full names on such platforms. The Defence Force states it implements measures to safeguard personnel, facilities, operations, and information, providing regular guidance on personal data and operational security, including before deployments. Currently, NZDF does not have a policy specifically addressing Strava or similar fitness-tracking applications.
Strava offers privacy settings that can restrict what others see, such as limiting activity visibility to followers or oneself, hiding sections of a GPS route, or concealing entire maps. The platform also suggests stronger privacy controls around workplaces and sensitive locations. When activities are restricted to followers or the user, they do not appear on public leaderboards. NZDF emphasizes that the existence of online fitness data does not inherently constitute a security breach or violation of its protocols.”