A recent investigation has revealed that location data from U.S. military and intelligence personnel, including those stationed at German airbases believed to house American nuclear weapons, was collected and sold through mobile applications in 2024. The incident follows a broader pattern of location data privacy concerns that have emerged in recent years as mobile tracking becomes increasingly sophisticated.
The investigation, conducted jointly by Wired, 404 Media, Bayerischer Rundfunk (BR), and Netzpolitik.org, analyzed a free location data sample from Florida-based company Datastream. The analysis uncovered that the data originated from Lithuanian ad-tech company Eskimi before being acquired and resold by Datastream. The type of data brokerage chain has become common in the location tracking industry, where information often passes through multiple companies before reaching end buyers.
Following the discovery, U.S. Senator Ron Wyden (D-WA) intervened, requesting information from Datastream about the data’s source. After learning of Eskimi’s involvement, Wyden’s office made multiple attempts to contact the company but received no response. The senator’s office then reached out to Lithuania’s Data Protection Authority (DPA) regarding the national security implications of a Lithuanian company selling U.S. military personnel location data.
The Lithuanian DPA has initiated an investigation into the matter, though the results remain pending. The incident has highlighted the complex nature of the location data industry, where information can be transferred between multiple entities with limited oversight. The case emerges amid increasing regulatory scrutiny of mobile data collection and trading practices across the globe.
“Advertising companies often function as surveillance companies with better business models,” said Zach Edwards, senior threat analyst at cybersecurity firm Silent Push. His observation reflects widespread concerns about the intersection of commercial data collection and national security risks.
To mitigate such data exposure, security experts recommend that smart device users disable location services when not needed. Government personnel may also use Virtual Private Networks (VPNs) as an additional security measure. These precautions have become increasingly important as mobile devices continue to collect and transmit sensitive location data through various applications and services.
Sources: Digital Trends, CyberPeace Blogs, NowSecure Blog
Follow Us