Google Pixel repair workers accused of hunting through phones for nudes
This is why you should always erase a smartphone before sending it in for repair
Sending your Android smartphone in for repair can be stressful enough as it is but one unlucky Google Pixel owner also had her device hacked in the process.
As reported by The Verge, game designer and author Jane McGonigal sent her broken Pixel 5a to an official Pixel repair center in October. Unfortunately though, Google claimed it had never received the phone and she was charged for a replacement device instead.
McGonigal provided further details on the situation while warning other Pixel owners not to send their devices back to the search giant for repair in a recent tweet, saying:
“Yeah, don't send your Google phone in for warranty repair/replacement. As has happened with others, last night someone used it to log into my Gmail, Drive, photos backup email account, Dropbox, and I can see from activity logs they opened a bunch of selfies hoping to find nudes.”
Security risks of mail-in repairs
Although Google said it never received McGonigal's Pixel 5a, FedEx tracking information revealed that the device successfully arrived at the company's Pixel repair facility in Texas.
To make matters worse, after receiving a refund for her device, someone used the missing phone to clear two-factor authentication (2FA) checks and log into several of McGonigal's online accounts including her cloud storage and email client.
While this suspicious activity did trigger several email security alerts, McGonigal believes that whoever had her phone used it to access her backup email addresses and move these alerts into her spam folder. While inside her cloud storage, the person who had her phone accessed photos of her in bathing suits and dresses in what appears to be an attempt to access any nude photos she may have had.
Are you a pro? Subscribe to our newsletter
Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!
According to The Verge, this is the at least the second report of someone sending a Pixel phone in for repair and having their private data and photographs leaked. A spokesperson for Google told the news outlet that the company is currently investigating McGonigal's claim.
If you're worried about someone accessing your online accounts or data when sending a device back for repair, Google's official repair instructions recommend that you backup a device and erase it before sending it in. For those that would rather do the repairs themselves, iFixit has an entire section on its site dedicated to showing you how to fix common Google Pixel problems and the company also sells all of the spare parts and tools you might need when doing so.
We've also highlighted the best Android phones and best Pixel phones
Via The Verge
After working with the TechRadar Pro team for the last several years, Anthony is now the security and networking editor at Tom’s Guide where he covers everything from data breaches and ransomware gangs to the best way to cover your whole home or business with Wi-Fi. When not writing, you can find him tinkering with PCs and game consoles, managing cables and upgrading his smart home.