2023 Investigation Reveals U.S. Military Members’ Personal Data Being Sold to Overseas Buyers

A November 2023 Politico article by Mohar Chatterjee titled “U.S. Military Member Data for Sale Overseas, New Study Finds” sheds light on a troubling national security threat: the personal data of active-duty U.S. servicemembers is being collected and sold by commercial data brokers, sometimes to foreign buyers. The investigation, which was supported by the U.S. Military Academy at West Point, found that sensitive personal information about thousands of active-duty military members is alarmingly accessible to entities outside the United States.

The study was conducted by researchers at Duke University, who posed as potential buyers from the U.S. and Singapore. Their inquiry revealed that three data brokers were willing to sell them datasets containing information about nearly 30,000 active-duty military personnel and an additional 5,000 friends and family members. Two brokers declined to sell, citing stricter verification processes. Researchers were able to purchase detailed information including names, addresses, and demographic profiles, raising deep concerns about how easily this data could fall into the hands of adversaries.

Maj. Jessica Dawson of the Army Cyber Institute at West Point, who initiated the study, warned that this data could be exploited to target individuals based on personal vulnerabilities. Meanwhile, Justin Sherman, a senior fellow at Duke University’s Sanford School of Public Policy and the lead researcher on the project, emphasized how simple it would be for foreign adversaries to replicate the researchers’ efforts, noting that the research adhered to strict university ethics processes but adversaries would have no such limitations.

The Consumer Data Industry Association, which represents the interests of data brokers, declined to comment for the original article. The report highlights the broader, systemic risks posed by the largely unregulated U.S. data broker industry, estimated to be worth $214 billion. Lawmakers have increasingly raised alarms about how data brokers compile, package, and sell personal information sourced from public records, consumer transactions, and even government databases with little oversight or accountability.

This investigation demonstrates that beyond abstract privacy concerns, the commodification of Americans’ personal data — particularly that of individuals in national security-sensitive positions — poses immediate and tangible risks to the United States. The findings renew urgent calls for Congress to enact stronger federal data privacy laws that would better protect individuals and restrict the sale of sensitive information to foreign or unknown buyers.

Disclaimer: This blog post is a summary for informational purposes only. It is not guaranteed to be accurate and does not constitute legal advice. Readers should consult the original Politico article or a qualified attorney for further information.