Learn

284 articlesCategory: All
Past information and search

Data broker risk

On the internet, some companies collect, organize, and provide information about individuals.

They are generally called data brokers.

The information they handle may include names, addresses, phone numbers, email addresses, family details, occupations, purchase patterns, interests, and public profiles.

When thinking about anonymity, the important point is that information you did not directly post yourself may still be organized somewhere else.

What is a data broker?

A data broker is a company or service that collects, analyzes, sells, or provides information about individuals, households, companies, and similar subjects.

Sources vary.

Public information. Commercial data. Behavioral data from apps and the web. Directories. Real estate information. Purchase histories. Surveys.

Rules and treatment differ by country and region. However, the problem of personal information being collected and combined across multiple places exists worldwide.

The problem with data brokers is not that information exists in one place. It is that information from separate places is combined as information about the same person or household. When names, addresses, phone numbers, email addresses, family information, purchase patterns, interests, public social media, and location-related information are linked, a person's outline becomes quite visible.

Of course, not every company has the same information. The information handled changes depending on country or region, legal system, company, and data source or acquisition path. Even so, when thinking about anonymity, you need to understand that "information I did not directly put out myself may still be organized externally."

Relationship to anonymity

In anonymous activity, you usually want to reduce information that connects to you.

However, information held by data brokers may reveal names, addresses, phone numbers, family members, past addresses, occupations, and similar details.

If an anonymous account's posts contain clues about regular locations or an occupation, those clues can connect with external personal information and narrow the candidate set.

InformationImpact on anonymity
Address or past addressLinks with regular locations
Phone numberLinks with account registration and contact information
Email addressBecomes an identifier across multiple services
Family informationThe person may be inferred through family
Occupation or workplaceLinks with post content
Purchases and interestsBecomes material for behavior patterns

Data broker information becomes a risk when combined with post content.

For example, suppose an anonymous account writes, "I am raising children in this area," "I work in a specific industry," "I work night shifts," or "I often use this train line." That alone does not reveal a real name. But when it overlaps with external information about addresses, family details, occupation, past addresses, or phone numbers, the candidate set narrows.

For anonymity, do not look only at post content. Think about whether it links with personal information that exists externally. Data broker information can function like a candidate list that an attacker can use. An anonymous post then becomes material that narrows that list further.

Information in anonymous postOverlapping external dataWhat happens
Places someone regularly spends timeAddress, past address, family addressCandidate area narrows
Occupation or industryWorkplace, job type, qualificationsCandidate identities narrow
Family compositionHousehold information, cohabitants, relativesInferred through someone other than the person
Phone or email tracesRegistration information, leaked dataMultiple services become connected
InterestsPurchase history, ad categoriesPost content overlaps with behavioral tendencies

Some information did not come from you

The difficulty with data brokers is that the information is not limited to what you directly made public.

Information about family or cohabitants. Old directories. Public information related to real estate or companies. Leaked data. Past registration information.

This kind of information may remain in other forms.

For anonymity, you cannot simply say, "I did not post it, so it is fine."

Information posted by family members or cohabitants may reveal places where you regularly spend time. Your name may appear in workplace, school, local government, event organizer, or organization materials. Old directories, PDFs, old web pages, job postings, speaking information, and contributed articles can also become clues.

Phone numbers and email addresses are also identifiers that are often reused across multiple services. If you use contact information from the real-name side somewhere close to anonymous activity, the risk of linking with external information increases. For anonymous activity, you need to think separately about contact details, payments, delivery, authentication, and recovery methods.

Removal is not simple

Removal from data brokers differs by country and service.

In some cases, you can submit a removal request. In some cases, identity verification is required. In some cases, only part of the information is removed. In some cases, the same information remains with another company.

It is more realistic not to think of removal as something finished in one attempt.

There are also cautions when submitting removal requests. You may be asked for additional information for identity verification. Providing that information can increase other records. Choose carefully the email address used for removal requests, the identity documents you submit, and what you write in the request.

Also, even if one company removes the information, the same information may remain with another company. If the source is shared, it may be republished over time. For that reason, removal should be combined with periodic checking rather than treated as a one-time task.

What to check

For data broker countermeasures, check the following.

  • Whether personal information sites appear when searching your real name
  • Whether your phone number or email address can be searched
  • Whether your address or past addresses are public
  • Whether you can be inferred from family information
  • Whether anonymous posts contain clues about places you regularly spend time or your occupation
  • Whether removal requests are possible

After checking exposure of personal information, adjust the content of anonymous posts.

When checking, look not only at your real name, but also phone numbers, email addresses, past addresses, family names, former names, and handles. However, the act of searching itself may also leave records. If you search from a real-name browser, a logged-in search service, or a workplace or school network, other logs may increase. Separate the environment for investigations related to anonymous activity.

Check targetReason to check
Real nameCheck basic personal information exposure
Phone numberSee links with account registration and contact information
Email addressCheck reuse across multiple services
Address and past addressSee overlap with regular locations
Family namesPrevent inference through family
Occupation and workplaceCheck correlation with post content

Operate on the assumption that information remains

For data broker countermeasures, reducing removable information is important. However, relying only on removal is dangerous.

If information remains externally, make sure anonymous posts do not overlap with that information. Do not write detailed places you regularly spend time. Do not write family details in concrete terms. Reduce the granularity of occupation or industry. Do not use the real-name side's email address or phone number. Do not use the same profile image or handle.

Anonymity is determined by the combination of information you put out and information that remains externally. Data brokers need to be understood as entities that amplify that external information.

Summary

Data brokers are companies or services that collect, organize, and provide information about individuals.

They may handle names, addresses, phone numbers, email addresses, family information, occupations, interests, and similar information.

For anonymity, not only information you directly posted yourself, but also externally organized personal information becomes a risk.

Removal is not simple. For that reason, you need to think carefully about post content, places you regularly spend time, occupation, and family information on the assumption that external information may remain.

Related tools

Archive check

Wayback Machine

An external resource related to this article. Open it only when it fits your situation and threat model.

Why it is listed: It can help with the article topic, but it is outside Anonymity Sense and should be checked before use.

URL : https://web.archive.org/

Open external site
Search result removal

Google Search removal tools

An external resource related to this article. Open it only when it fits your situation and threat model.

Why it is listed: It can help with the article topic, but it is outside Anonymity Sense and should be checked before use.

URL : https://support.google.com/websearch/answer/3143948

Open external site
OSINT directory

OSINT Framework

An external resource related to this article. Open it only when it fits your situation and threat model.

Why it is listed: It can help with the article topic, but it is outside Anonymity Sense and should be checked before use.

URL : https://osintframework.com/

Open external site

Related articles