WELLINGTON, NEW ZEALAND / RankWire.AI / – Detailed fitness activity data from Strava has uncovered the routines and locations associated with hundreds of individuals connected to New Zealand Defence Force. An investigative review identified a total of 565 Strava users who recorded activities at NZDF camps and bases starting from January. Of these profiles, 488 were made public, allowing others to view complete records of their activities. While investigators could not verify that every account belonged to NZDF personnel, most profiles showed at least one marker indicating military service.
Locations logged included key defence sites across New Zealand, such as Whenuapai, Devonport, Ohakea, Linton, Burnham, Waiouru, and Woodbourne. Several users documented workouts inside Papakura Military Camp, home to the New Zealand Special Air Service, while others noted activities at the nearby Ardmore training zone. Public segments tied to base routes and military fitness assessments also appeared, with some leaderboards displaying user names since 2018.
The scope of activity extended beyond New Zealand, capturing international locations in 13 countries and territories. These included sites in Australia, the United States, South Korea, Japan, Britain, Egypt, the Philippines, Fiji, and the Cook Islands. Activity was also recorded in Antarctica. Profiles showed movements between New Zealand bases and overseas military installations, creating publicly accessible records linking individuals with specific locations and travel routes.
Detailed military routines exposed through public data
Strava’s platform enables users to track and share runs, rides, and other workouts with GPS technology. Its public segments can display leaderboards for popular routes. The review uncovered 41 public segments at defence locations. Some private profiles also appeared on public leaderboards by name. In at least 30 instances, these names connected activity across multiple military sites. Additionally, linked accounts or tagged activities revealed family connections in 13 cases.
Beyond location data, some profiles included photos, videos, and workout titles related to military training. Examples ranged from activities at Waiouru and other training zones to workouts near overseas bases and diplomatic sites. A senior NZDF member posted activities under their real name while serving in the United States. This profile displayed movements involving multiple military sites as well as runs near New Zealand’s embassy in Washington.
NZDF issues guidance on fitness tracking safety
The NZDF has issued warnings to personnel regarding risks associated with fitness-tracking apps and social media platforms. Its guidance advises personnel to disable fitness tracking features in sensitive areas and to refrain from using full names on such platforms. The Defence Force emphasizes implementing measures to safeguard personnel, facilities, operations, and information. It also states that personnel regularly receive guidance on managing personal data and operational security, particularly before deployments. Currently, the NZDF does not have a specific policy addressing Strava or similar fitness-tracking applications.
Strava offers privacy controls that enable users to limit what others can see. Users can restrict activity visibility to followers or themselves, hide segments of a GPS route, or conceal entire maps. The platform also recommends adopting stronger privacy settings for workplaces and sensitive locations. When activities are limited to followers or private, they do not appear on public leaderboards. The NZDF explained that sharing online fitness data alone does not constitute a security breach or violate its operational requirements.