1. John McAfee located by a single photo (2012)
In November 2012, antivirus pioneer John McAfee was on the run from authorities in Belize. Two journalists from Vice magazine travelled with him and published a story titled "We are with John McAfee right now" — accompanied by a photo taken on an iPhone. The photo's EXIF data contained precise GPS coordinates, revealing that McAfee was hiding in Guatemala, next to a swimming pool at a specific resort. He was arrested by Guatemalan authorities days later.
The lesson
Even professional journalists forgot that a smartphone photo carries GPS coordinates. If it can happen in a high-stakes exclusive, it can happen in any photo you post.
2. The BTK killer caught by a Word document (2005)
Dennis Rader, the "BTK" serial killer, evaded police for over 30 years. In 2005 he sent a floppy disk to a Wichita TV station containing a Word document. Police examined the document's metadata and found the name "Dennis" and a link to "Christ Lutheran Church". A quick search showed that a Dennis Rader was the president of the church council. He was arrested within days and is serving ten consecutive life sentences.
The lesson
Office documents silently record author names, organisations and edit history. Rader even asked police (via an earlier message) whether a floppy disk could be traced — he just didn't know the document itself would betray him. See what your own documents store in our guide to Word and Office metadata.
3. The Anonymous hacker betrayed by his girlfriend's photo (2012)
Higinio O. Ochoa III, known online as "w0rmer", hacked several US law enforcement websites as part of an Anonymous-affiliated group. To taunt investigators, he posted a photo of his girlfriend holding a sign that mocked the police. The photo had been taken with an iPhone — and its EXIF data contained GPS coordinates pointing to her house in Australia. The FBI connected the location to Ochoa through his girlfriend and arrested him. He was sentenced to 27 months in federal prison.
The lesson
Technical skill doesn't protect you from a moment of carelessness. A hacker who covered his tracks online was caught by a single photo taken on a phone.
4. The Strava heatmap that revealed secret military bases (2018)
In 2018, fitness app Strava published a global "heatmap" of user activity. Analysts quickly noticed bright running loops in the middle of deserts in Syria, Afghanistan and Africa — soldiers jogging around undisclosed military installations, their GPS trackers dutifully recording every lap. Patrol routes and base perimeters that governments kept secret were visible to anyone.
The lesson
This wasn't file metadata but the same principle at scale: location data collected quietly in the background, aggregated, and published. Individually harmless data points become revealing patterns.
5. The leaked document that identified a source (2017)
When a classified NSA report was published by an online news outlet in 2017, investigators didn't need the leaker to confess. The published scan contained nearly invisible yellow tracking dots — a pattern most colour laser printers embed in every page, encoding the printer's serial number and the exact date and time of printing. Combined with print logs, this identified contractor Reality Winner, who was sentenced to more than five years in prison.
The lesson
Hidden identifying data isn't limited to digital files — even paper carries it. Any document that passes through a device can pick up a fingerprint of that device.
The common thread
None of these people were exposed by the content they chose to share. They were exposed by data they didn't know they were sharing. That's what makes metadata dangerous: it's invisible by default, and it's attached to almost everything — photos, documents, videos, even printed pages.
You probably aren't running from the FBI. But the same GPS coordinates that located McAfee are in your marketplace listing photos, and the same author fields that identified Rader are in the documents you email. Checking takes seconds with a free metadata analyzer — and removing it takes one more click.
See what your files reveal about you
Free analyzer & remover · No account needed.