Data Brokers Target U.S. Troops

U.S. Central Command told Congress it received multiple reports that foreign actors bought commercial location data to track American troops in active war zones, and the military rushed to shut off ad trackers on devices in response.

Story Snapshot

Central Command reported adversary use of purchased location data to monitor U.S. personnel in theater.
Lawmakers warned the Pentagon it failed to take basic steps to protect troops from data brokers.
Services disabled mobile advertising identifiers on many devices after the disclosures.
Sold data can reveal troop gathering points and daily routines, raising attack risks.

What CENTCOM Confirmed To Lawmakers

U.S. Central Command wrote to Congress that it had received multiple threat reports about adversaries exploiting commercial location data to target or watch U.S. personnel in theater. Reuters reported this was the first official confirmation that American forces were targeted this way during an active conflict. The command did not name a specific country in the quoted language. The acknowledgment moved the issue from rumor to an on-record national security concern supported by official correspondence.

A bipartisan group led by Senator Ron Wyden and Representative Pat Harrigan pressed the Pentagon to act. Their May 28, 2026 letter said the department had not taken basic steps to protect service members from data-broker sales of precise information, including cell phone location records. The lawmakers warned that commercial datasets can map where troops gather and reveal their “pattern of life.” That kind of detail can aid missile strikes, drone attacks, roadside bombs, and counterintelligence work against U.S. units.

How The Military Responded Across Services

Military branches moved to reduce exposure by cutting off common tracking pathways on devices. The Air Force disabled advertising identifiers on its devices. United States Special Operations Command did so on Windows systems. The Army said mobile advertising identifiers had been off by default since at least February 2026. These steps target how apps and ad networks assemble profiles tied to unique device IDs that can feed brokered location databases.

The follow-on actions spanned multiple services, which signals leaders treated the risk as real and not isolated to one unit. Reporting connected the changes to concerns that commercially available location feeds had been used to target American forces in the Middle East. While officials did not release the raw intelligence, the scope of the device policy updates shows the problem touched different platforms and commands rather than a single edge case.

Why Sold Location Data Poses A Battlefield Risk

Data brokers package movements from smartphones and connected devices and resell them to many buyers. When that data includes precise coordinates over time, it can reveal base perimeters, convoy routes, and personal routines. Analysts and lawmakers warned that bad actors do not need to hack a network to learn when and where troops gather. They can buy the feed and derive patterns from it. That shift turns a consumer ad system into a map that can put lives at risk.

They don’t need to kick in your door anymore.

They already live in your phone.

Your face, your location, your searches, your children’s biometrics. All this and much more harvested, sold, and mapped while foreign money writes the ads that tell you what to fear. The… pic.twitter.com/aXXyiXrnHJ

— Of The People By The People For The People (@_OTP_BTP_FTP_) September 17, 2026

The issue also reflects a larger policy gap in the United States. The market for commercially available information has grown for years without a single, strong privacy law that covers location tracking nationwide. That patchwork lets foreign buyers route purchases through shell firms and intermediaries. It makes enforcement hard and pushes the burden back on the Pentagon to harden devices, limit app permissions, and set strict rules for personal phones near sensitive areas.

What We Still Do Not Know Publicly

Public records do not name the precise brokers, apps, or datasets tied to the reported threat. Officials did not release the underlying intelligence reports, so the number of affected personnel and any direct harm linked to these purchases remain undisclosed. Reuters noted the Central Command letter confirmed threat reports, not full incident case files. Even with those limits, service-wide steps to disable advertising identifiers show leaders acted on the threat picture they had.

For troops and families, the takeaway is simple and urgent. Personal devices can expose location even when used off duty. Turning off advertising identifiers, limiting app permissions, and avoiding unknown apps matter. For policymakers, the message is broader. When anyone can buy sensitive movement data inside a legal market, national security becomes a consumer-privacy problem. That is a rare area where many conservatives and liberals agree the system puts profit over safety and needs firm guardrails.

The Stakes For Trust And Readiness

Service members rely on leaders to control risks they cannot see. When a commercial ecosystem can track them in a war zone, it feeds a wider belief that government and big business left basic protections undone. Rapid device changes by the Army, Air Force, and Special Operations Command suggest the military is closing some doors. The harder task is closing the market loopholes that let foreign buyers turn American data exhaust into a targeting tool.