Out of 943 devices identified at three London stations, 379 had been left on their default security settings and 138 were vulnerable to hacking attacks, known as Bluesnarfing.
Personal data including voice messages, address books, e-mails and diaries stored on mobile devices were extremely vulnerable to theft or manipulation, the company said.