Hundreds of GPS services are vulnerable, most of which use open APIs and weak passwords, such as 123456 (really??)

New Term  "Trackmadeddon" - A security flaw in Location tracking devices.

The information exposed by the devices includes location history and current location, phone number, model, type and IMEI number of the device and audio recordings and images. Moreover, it is also possible to activate or deactivate certain features of a device (for e.g., geofence alerts) by sending out commands.

According to the research, 79 domains are still vulnerable, which means more than 6.3 million devices and 360 device models are vulnerable to data exposure.

For More:
https://www.hackread.com/security-flaws-in-gps-trackers-millions-of-data-at-risk/