Lawmakers demand DoD probe as military location data leaks to brokers
Despite disabling advertising IDs on government devices, US troop movements remain visible in commercial datasets.
Senator Ron Wyden (D-OR) and Rep. Pat Harrigan (R-NC) have called for a Department of Defense Inspector General investigation into why US military personnel can still be tracked via purchased location data. The demand follows revelations that precise location data from DoD facilities continues to appear in commercial datasets despite technical efforts to block it.
The Army, Air Force, Navy, Marine Corps, and Special Operations Command have all confirmed they now disable mobile advertising identifiers (MAIDs) on government-issued devices. However, lawmakers note that this fix may have arrived too late, with some implementations occurring as recently as July. Wyden and Harrigan are questioning whether MAIDs are no longer the primary tracking vector or if the leaked data is originating from the personal devices of military personnel and contractors.
The Mechanics of Tracking
At the center of the leak are Mobile Advertising Identifiers (MAIDs), which function as "join keys." These unique IDs allow commercial data brokers to link disparate datasets, enabling them to track specific individuals across different apps and services. While some US states have established data broker registries to monitor this activity, the global nature of the ad-tech ecosystem creates significant security gaps.
Foreign adversaries, specifically Russia and China, can acquire this sensitive data through programmatic ad tech auctions and Western publishers. In many cases, these entities operate under legal obligations to share any acquired intelligence with their respective states, turning commercial advertising tools into intelligence assets.
National Security Implications
The ability for adversaries to purchase precise location data presents a critical risk to operational security. Such data allows foreign intelligence services to identify troop concentrations and target military personnel, a vulnerability that becomes acute in active combat zones.
Industry experts suggest the problem is systemic. Zach Edwards, a staff threat researcher at Infoblox, noted that it is "truly unfortunate" that Google and Apple have not effectively reformed mobile advertising IDs, despite documentation showing they are the primary data points used by brokers to connect location data for bulk sales.
Next Steps for the DoD
The requested Inspector General probe will seek to determine the exact source of the ongoing leakage. The investigation must clarify if the DoD's current technical controls are insufficient or if the reliance on personal devices within secure facilities has created an unmanageable blind spot. Until the DoD can verify that its personnel are invisible to commercial brokers, the risk of targeted intelligence gathering remains a persistent threat to US forces.