HuntStand, a mobile app used by hunters and land managers across the United States, had data scraped from its platform and publicly posted to a hacking forum in March 2024. The scrape was not a direct system breach but involved automated collection of publicly accessible or poorly protected profile data. Approximately 2.8 million unique user records were exposed in the incident. The exposed data included email addresses, names, dates of birth, and country of residence. For HuntStand users, the risk extends beyond typical identity theft concerns. The platform tracks GPS locations, property boundaries, and hunting activity, meaning that even indirect exposure of user identities can help bad actors infer private land access points, recurring movement patterns, and home-area routines. This creates a real potential for physical-world targeting. HuntStand has not made prominent public statements about the incident, and no regulatory action or litigation has been documented. Affected users should treat their email address as compromised, watch for phishing attempts that reference outdoor or hunting activity, and consider whether any location-linked data in their profile is visible to others. Anyone who reuses the same password across accounts should change it immediately.

Outdoor navigation and land-management apps collect user accounts, device data, precise location history, map annotations, property boundaries, and activity records tied to hunting and land use.

HuntStand continues to operate as a hunting and land management app. The platform has maintained its position in the outdoor recreation app market. No major organizational changes have been publicly reported.