Leaked documents show around 250 bounty hunters and related businesses had access to AT&T, T-Mobile, and Sprint customer location data for at least five years
In January, Motherboard revealed that AT&T, T-Mobile, and Sprint were selling their customers' real-time location data …
Context & Ripple Effects
Motherboard's January investigation showed how cheaply and easily middlemen could obtain customers' real-time location from AT&T, T-Mobile, and Sprint, prompting the carriers to pledge an end to the practice. The leaked documents now put a number on the exposure: roughly 250 bounty hunters and related businesses with access stretching back at least five years.
The disclosure also connects to earlier reporting on how bounty hunters and stalkers obtained location fixes by impersonating police during supposed crises — meaning access wasn't just broad but actively abused.
First-order effects
- AT&T, T-Mobile, and Sprint face immediate pressure to explain how hundreds of bounty-hunting businesses held location access for five years despite their pledges to wind down third-party sales.
- The location-aggregation middlemen who resold carrier data lose their supply as the carriers' shutdown commitments take effect.
Second-order effects
- The class action lawsuits already filed against all four carriers gain a concrete damages narrative — a documented five-year, 250-party access list strengthens plaintiffs' claims.
- Verizon, which faced the same lawsuits but wasn't named in this leak, still had to send the same cessation letter to the FCC, showing the reputational cost spreads across the whole carrier group regardless of individual conduct.
Third-order effects
- If the pattern holds, carrier location data exits the open market entirely, pushing any residual demand toward lawful channels like warrants and court orders rather than commercial aggregators.
- The episode points toward broker-level regulation: when telco-grade data reaches hundreds of unvetted buyers through intermediaries, oversight shifts from the carriers' contracts to statutory limits on the data-broker layer itself.
The trend: Carrier location data is being pulled out of the commercial resale market and back behind legal process, with class actions and FCC scrutiny accelerating the retreat.