The Pentagon Knew Enemies Could Track Troops’ Phones for Years. Now They Are

For almost a decade, the Pentagon was warned—by its personal contractors, analysts, and intelligence businesses—that anybody with a bank card may purchase a map of the place American troops sleep, work, and retailer nuclear weapons. Now the invoice has come due in a warfare zone.

A newly disclosed letter reveals the warnings went unheeded: US Central Command now confirms it has obtained “a number of risk stories regarding adversary exploitation of business location knowledge to focus on or surveil US personnel in theater”—the primary official acknowledgment that the data-broker economic system is getting used to hunt American forces within the Center East.

The concentrating on was first reported by Reuters, which obtained the Centcom letter. However the affirmation lands atop a file that’s longer and extra damning than the one doc suggests.

For the higher a part of a decade, US lawmakers have heard the identical alarms in regards to the risks of commercially obtainable location knowledge that the Pentagon did—from the identical intelligence assessments, from witnesses, from their very own colleagues. But complete privateness laws has repeatedly stalled in Washington, and the one slim repair that did move—a requirement that knowledge shared with navy contractors not be resold—left the broader trade untouched.

One of many earliest warnings got here in 2016. On the Joint Particular Operations Command compound at Fort Bragg, California, a authorities technologist briefing senior officers demonstrated how industrial location knowledge—purchased, not hacked—may observe telephones from Fort Bragg and MacDill Air Power Base in Florida, the house stations of America’s most elite models, by way of Turkey and into northern Syria, the place they clustered at a covert ahead working base. The identical knowledge was obtainable to any advertiser or international intelligence service.

Even because the Pentagon was warned that the location-data market was putting its personal individuals in peril, components of the division had been desirous to change into its prospects. The Protection Intelligence Company disclosed to Congress in 2021 that it makes use of commercially bought telephone location knowledge—together with on People—with out a warrant, taking the place that none is required. Months earlier, Motherboard reported that the US navy was shopping for location knowledge harvested from fashionable client apps.

In 2023, the Military paid to have the risk spelled out. Researchers at Duke College—working below a grant from the US Army Academy at West Level—got down to purchase knowledge on American service members the way in which a international adversary would possibly. They scraped a whole bunch of knowledge dealer web sites and located 1000’s of listings promoting knowledge on navy personnel, together with datasets titled “Army Households Mailing Listing” and “Onerous Core Army Households.”

The researchers began shopping for. For as little as 12 cents a file, with virtually no vetting, they bought names, dwelling addresses, well being circumstances, and monetary particulars on active-duty troops. Posing as a purchaser working by way of a Singapore-based area, additionally they obtained the identical form of knowledge geofenced to Fort Bragg, Quantico, and different installations. One dealer supplied to skip its identification examine in the event that they paid by wire.

A yr later, WIRED discovered the identical form of knowledge flowing by way of Google’s personal promoting platform. Working with knowledge obtained by the Irish Council for Civil Liberties—whose investigator had gained entry to a US dealer’s viewers lists by standing up a pretend analytics agency—WIRED recognized advertising “segments” on Google’s Show & Video 360 that singled out US authorities workers deemed “decisionmakers” working “particularly within the discipline of nationwide safety,” alongside lists concentrating on individuals who work for firms licensed to construct missiles, space-launch automobiles, and the cryptographic techniques that defend categorized knowledge.

The Irish Council for Civil Liberties investigator mentioned he anticipated to have his cowl story examined. “After I signed up, there was no questions requested in any way,” he informed WIRED on the time. “I may have been anyone.”