• Overview
    • Scam Map
    • Kill Chain
Recents

    Conversations will appear here

Technique

Data Brokers

Also known as: People Search Sites, Data Aggregators, Information Brokers, Information Resellers, Consumer Data Companies, Consumer Reporting Agencies

TARGETING

Companies that collect, aggregate, and sell personal information about consumers they have no direct relationship with. Data brokers compile profiles from public records, social media, purchase histories, web browsing, mobile apps, and other sources, creating detailed dossiers on hundreds of million…

Common attack flows

How it fits in a scam

This technique shows up duringTARGETING

Before

  • Ad Network TrackingTARGETING
  • Data Breach HarvestingTARGETING
  • Social Media ReconnaissanceTARGETING
  • Malicious App InstallationCOMPROMISE
  • +1 more

After

  • Phishing EmailDELIVERY
  • VishingDELIVERY
  • Synthetic Identity CreationEXPLOITATION
  • DoxingEXPLOITATION
  • +2 more

Defense

How to defend against this

How to spot it

  • Receiving scam calls with accurate personal details from unknown sources
  • Finding your info on people search sites you never signed up for
  • Getting targeted solicitations shortly after life events like moving or marriage
  • Unknown callers who know your name and address before you identify yourself
  • Personalized phishing referencing specific details you have not publicly shared
  • Repeated re-targeting by different scammers after falling for one scam (revictimization pattern)
  • Unsolicited mail from companies you have never interacted with using correct personal details

Tools you can use

  • Data Broker Opt-OutCost medium · Effect medium
  • Social Media Privacy SettingsCost low · Effect high

Steps you can take

  • Minimal Public ProfileCost low · Effect medium

Further reading

  • Privacy Rights Clearinghouse

    Comprehensive overview of data broker practices and opt-out info

  • DeleteMe Blog

    Practical guide to data broker landscape

  • Privacy Rights Clearinghouse

    Comprehensive overview of data broker practices, opt-out info, and California DROP platform

  • DeleteMe Blog

    Practical guide to data broker landscape and removal services

  • CFPB Proposed Rule (Dec 2024)

    Federal proposal to classify data brokers as consumer reporting agencies under FCRA

  • Lawfare - Data Brokers and Elder Fraud

    DOJ prosecution of Epsilon, Macromark, and KBM for selling consumer data to scammers targeting elderly Americans

  • Brennan Center for Justice

    Analysis of data broker regulatory gaps and government surveillance via commercial data purchases

  • Privacy Rights Clearinghouse Tutorial

    Tutorial on data broker types: people search, marketing, and risk mitigation products

  • National Cybersecurity Alliance

    Consumer guide on data broker risks and protection strategies

Related techniques

Same stage

  • Data Breach Harvesting
  • Social Media Reconnaissance
  • Dating Profile Farming
  • Ad Network Tracking
  • ISP Data Harvesting

Similar defense

  • Doxing
  • Swatting
  • Identity Theft
  • Sextortion
  • Pig Butchering
  • +1 more