An Australian university student has triggered a review into US security protocols after noticing fitness app Strava’s activity heat maps may reveal sensitive information.

ANU Canberra student Nathan Russer discovered locations of and movements within US military facilities in the Middle East, as well as the supply highways US forces take through the countries.

US Defense Secretary Jim Mattis has since ordered a review of Department of Defence security protocols.