A routine morning run on a fitness app has turned into a significant military security breach — exposing the real-time location of France's only nuclear-powered aircraft carrier as it operates in the Mediterranean amid escalating conflict in the Middle East.
A French naval officer identified only as "Arthur" used the popular fitness app Strava to log a 7-kilometer run while circling the deck of the aircraft carrier Charles de Gaulle. Because his account was set to public, the uploaded data exposed the vessel's exact position in the eastern Mediterranean, northwest of Cyprus, in an area of ongoing regional tensions.
The incident occurred on March 13 at 10:35 a.m., when the officer jogged just over 7 kilometers in approximately 35 minutes while using a smartwatch to track his performance. Because his Strava profile was set to public, the data was automatically uploaded online — including precise geolocation details placing the carrier roughly 100 kilometers from the Turkish coast.
Le Monde, the French newspaper that first reported the breach, verified the lapse using satellite imagery taken shortly after the jog, which clearly showed the distinctive outline of the 262-meter carrier northwest of Cyprus. The carrier's route had effectively been mapped across multiple months through Arthur's public profile, with workout data placing the ship off the coast of Cherbourg in February, in Copenhagen in late February, and in the eastern Mediterranean by mid-March.
French President Emmanuel Macron announced on March 3 that he had ordered the carrier's deployment to the region, days after the outbreak of conflict involving Israel, the United States, and Iran. The carrier was previously in the Baltic Sea for NATO exercises and had been scheduled to remain there until May.
France's Armed Forces General Staff acknowledged the lapse to Le Monde, saying that posting such activity did not comply with operational digital security rules and that "appropriate measures will be taken by the command." Le Monde also found that at least one other crew member on active deployment had shared geolocated fitness activity online, including photos of the ship's deck, fellow sailors, and onboard equipment.
The breach is the latest in a pattern of fitness-app-related military security failures. The U.S. Department of Defense banned the use of fitness-tracking apps and wearable fitness trackers in operational areas in 2018 after the locations and layouts of covert military bases were inadvertently exposed when soldiers' Strava workout data was compiled into a global heat map. In January 2025, French Navy submariners also shared patrol information via Strava, which officials at the time called personnel negligence.
The Charles de Gaulle is France's only nuclear-powered aircraft carrier and the only nuclear-powered carrier built outside the United States. The vessel carries Rafale M fighter jets, airborne early warning aircraft, and helicopters, and serves as a mobile airbase capable of projecting power without relying on land-based infrastructure.
LISTEN on the Audacy App
Tell your Smart Speaker to "PLAY 1080 KRLD"
Sign Up to receive our KRLD Insider Newsletter for more news
Follow us on Facebook | Twitter | Instagram | YouTube