Ad Industry Under Fire: U.S. Troops Targeted with Location Data

TL;DR
- The U.S. military says adversaries have used commercially bought location data to track or surveil serving personnel in theater, raising fresh alarm about adtech’s security risks.
- Sen. Ron Wyden says the episode shows the adtech industry should be treated as a national security threat, not just a privacy problem.
- The case is intensifying pressure on lawmakers to rein in location-data collection, data brokers, and the broader ad ecosystem.
U.S. troops exposed through commercial location data
The U.S. Department of Defense has confirmed that hostile actors have used purchased commercial location data to target or surveil U.S. servicemembers, according to a letter from U.S. Central Command shared by Sen. Ron Wyden. CENTCOM said it had received multiple threat reports about adversary exploitation of commercial location data “in theater,” underscoring that data collected for advertising can be repurposed for military targeting. Reuters reported the news first, and TechCrunch highlighted the Pentagon’s confirmation.
The warning lands at a moment when location data remains widely collected from phones and computers through digital advertising systems, then resold by brokers on the open market. That data trail can reveal where people live, work, travel, and gather, making it valuable not only to marketers but also to intelligence services and hostile actors.
Why this matters beyond privacy
The core concern is no longer limited to consumer privacy. If location data can expose where troops assemble or move routinely, it can create operational security risks on battlefields and in deployed settings. A bipartisan group of lawmakers has previously warned that commercial location data could reveal troop gathering points and daily patterns, potentially exposing them to missile, drone, or roadside bomb attacks.
That is why Wyden’s warning is so sharp: he said it is time to “start treating the adtech industry as a national security threat.” In this framing, the issue is not simply that advertisers know too much about users. It is that the underlying data infrastructure can be weaponized against military personnel and, by extension, U.S. national security interests.
How the adtech pipeline creates the risk
The modern adtech stack often collects location signals from mobile apps, websites, and embedded software development kits. Those signals can then be packaged, sold, and resold by data brokers. Even when the original collection is framed as advertising or analytics, the final product can be a granular record of movement patterns.
Once the data leaves the original platform, visibility and control diminish sharply. That creates a market where brokers may not know exactly who ultimately buys the information, and buyers can include entities seeking surveillance advantages rather than commercial insights. The military’s warning shows how a system built for targeted ads can also produce intelligence-grade exposure.
Pressure for regulatory changes
The latest disclosure is likely to intensify calls for tighter regulation of data brokers and adtech firms. The central policy question is whether lawmakers should continue treating commercial location data as ordinary consumer information or recognize it as strategically sensitive data that requires stronger limits.
Possible responses include stricter consent rules, bans on the sale of precise location data, stronger broker registration and auditing requirements, and clearer restrictions on who can buy sensitive datasets. The broader issue is whether the United States can preserve a digital advertising market built on pervasive tracking while also protecting military personnel, government workers, and other high-risk groups.
A national security problem hiding in plain sight
This case illustrates a deeper contradiction in the data economy: information gathered for marketing can end up supporting surveillance, coercion, or battlefield targeting. The Pentagon’s confirmation gives the debate new urgency because it moves the discussion from hypothetical abuse to documented operational risk.
For policymakers, the challenge is no longer whether location data can be misused. It is how much more evidence is needed before the adtech supply chain is treated as critical infrastructure with real national security consequences.
Get All The Latest Updates Delivered Straight To Your Inbox For Free!