Duke University study: personal data from active-duty US service members is cheap, easy to buy, and widely advertised by brokers; data on ~50K people cost ~$10K
Duke University researchers were able to purchase information about thousands of U.S. military personnel often for as little as 12 cents per person.
Context & Ripple Effects
The study extends a documented pattern in which commercial data markets expose information with national-security relevance. A declassified assessment had already described U.S. agencies' acquisition of commercially available sensitive information, while reporting showed the military itself buying granular app-derived movement data.
It also sits alongside other weak points in military data handling, including a biometric database found on a secondhand military device. The notable issue here is the low-cost, openly marketed route to assembling records on active-duty personnel.
First-order effects
- Active-duty service members' personal information can be acquired at low per-person cost, creating an immediately accessible exposure for personnel whose identities or contact details are in broker datasets.
- The findings put data brokers that market these records under sharper national-security scrutiny and give the U.S. military a concrete exposure pathway to assess.
Second-order effects
- Agencies seeking to limit personnel exposure must contend with a market they have also used for intelligence and monitoring; the earlier ODNI account of government data-broker purchases underscores that tension.
- Broker customers and data suppliers may face more questions about whether datasets that appear commercial can be sold or combined when they identify sensitive populations.
Third-order effects
- If such findings recur, data protection for sensitive occupations is likely to shift from an individual-consent issue toward a security-control issue covering collection, resale, and downstream access.
- The broader policy challenge is whether rules can distinguish legitimate data uses from datasets whose aggregation makes personnel targeting practical; this study supplies evidence for that debate rather than resolving it.
The trend: Commercial personal-data markets are becoming a national-security concern as inexpensive datasets can reveal information about people in sensitive roles.