The Shadowy World of Data Brokers: How Your Personal Information Is Sold
Even if you have never heard of data brokers, they almost certainly know you. These companies operate in a largely unregulated space, compiling and selling vast amounts of personal data with minimal safeguards. Experts warn that this dangerous industry enables stalking, fraud, and violence, putting countless individuals at risk.
Personal Stories of Exploitation
Julia, a white-collar worker in her thirties from the U.S. northeast, discovered the industry firsthand when a stalker began harassing her. After a brief encounter, the stalker revealed she had found Julia's information online. When Julia searched her own name and paid a small fee, she found her whole life story laid bare: college details, past addresses, and the names of roommates and close friends.
It was shockingly personal, and made me feel incredibly vulnerable, Julia, who uses an alias for protection, told reporters. Her ordeal began four years ago and continues today, leaving her in perpetual fear and with extreme anxiety.
How Data Brokers Operate
Data brokers compile information from various sources, including:
- Public documents like marriage certificates and voter registrations
- Bank records and loyalty card data
- Internet browsing histories
- Braking and acceleration logs from internet-connected cars
This data is often sold through complex webs of intermediaries. The U.S. lacks comprehensive nationwide privacy laws, meaning federal regulation is minimal and state-level protections are patchy at best.
Devastating Consequences
The consequences of this unregulated trade can be devastating. In 2020, Roy Den Hollander used data brokers to assemble a complete dossier on federal judge Esther Salas, leading to a home invasion that killed her son and injured her husband. More recently, Vance Boelter, accused of murdering Minnesota Democrat Melissa Hortman and her husband, possessed a notebook listing 11 data broker sites.
We see data broker information used as a tool of abuse with alarming frequency, said Belle Torek of the National Network to End Domestic Violence. An abusive partner doesn't need to be tech-savvy to access addresses, relatives, and work history for harassment.
The Scale of the Industry
There are at least 750 data brokers in the U.S., ranging from small firms to global giants. People search websites like Spokeo, WhitePages, and Intelius allow anyone to look up individuals for a fee, while companies like Experian, Equifax, and Acxiom cater to business clients including marketers and debt collectors.
Some brokers claim to have strong controls. A LexisNexis spokesperson stated they have extremely strong controls to protect the data we hold and thoroughly vet customers. However, a 2023 Duke University study found minimal vetting and few controls on data use.
Victims' Ongoing Struggles
Jessica Tunon, a financial consultant in Washington, D.C., experienced stalking for 13 years, believing her stalker used data brokers to track her across multiple relocations. I always felt like I was being followed, she said. Being on high alert for that long definitely affected my health and wellbeing.
Beyond stalking, data brokers have supplied information on vulnerable elderly people to scammers, leading to fraud and imprisonment of involved employees. Law enforcement officers have also been targeted, with criminals obtaining their addresses and even photographing their children's bedrooms.
The Challenge of Opting Out
While many brokers offer opt-out mechanisms, these are often ineffective. Privacy consultant Hayley Kaplan notes that it is extremely challenging to remove data, with disconnected phone numbers and unresponsive contact forms common. Even when data is removed, it frequently reappears within months.
Paid services like DeleteMe and Optery can help submit opt-out requests, but they cost $20 to $250 annually and are rarely comprehensive. For victims like Julia, the financial and emotional toll is significant: I have to pay for a lot of different services... It's expensive and anxiety-inducing.
Calls for Regulation
Some experts propose a centralized, government-maintained opt-out register to hold brokers accountable. However, the industry has resisted such measures, lobbying against laws like California's DELETE Act. Currently, only 20 U.S. states have comprehensive data laws, none as strong as the European Union's GDPR.
Turquoise Williams, an anti-stalking advocate, describes the combination of dangerous obsession and easy data access as like throwing gasoline on a fire. For now, those at risk must navigate a patchwork of regulations while living with the constant threat of their personal information being sold to the highest bidder.
