Location Data Is Now a National Security Bill Come Due
Reuters reported Thursday that U.S. Central Command told Sen. Ron Wyden it had received multiple threat reports involving adversaries exploiting commercial location data to target or surveil U.S. personnel in theater. The disclosure, shared in a bipartisan lawmaker letter to the Pentagon, is the first official confirmation cited by lawmakers that commercial location data has been used to target U.S. forces in an active war zone. The letter warned that data showing where troops congregate and their pattern of life can support missile, drone, roadside-bomb and counterintelligence threats. Wyden said Washington should begin treating the adtech industry as a national-security threat. The report also tied the current warning to years of concern over data brokers, advertising IDs, smartphone location sharing and browser-level data collection. Lawmakers urged military officials to move faster on device protections, privacy defaults and browser choices for government-issued devices.
The important part of this story is not that adversaries are clever. Of course they are. The important part is that the United States built a commercial surveillance market so large, so normalized, and so loosely governed that hostile actors no longer need a spy movie budget to follow sensitive people around the world. They can shop in the same data economy that marketers, brokers and analytics firms have been using for years.
That is the incentive story hiding in plain sight. Washington spent a decade treating location privacy as a consumer annoyance and an app-permission problem. Click accept. Improve your experience. Let this service use your location. Behind that harmless language sat a business model: collect movement, attach it to identifiers, package it through brokers and intermediaries, and sell insight to whoever can buy access. The result is not just creepier advertising. It is a national-security surface.
Once you see the system that way, the usual partisan script falls apart. This is not simply a Big Tech story, a Pentagon story, or a foreign-adversary story. It is a coordination failure between a surveillance-based private economy and a state that assumed it could benefit from the same data ecosystem without being exposed by it. The government likes data abundance when it is doing the watching. It looks shocked when the same pipes point backward.
The citizen lesson is even broader. If commercial location data can expose troops in theater, it can expose judges, staffers, police officers, journalists, dissidents, spouses, patients and ordinary people moving through sensitive places. The military version gets attention because the consequences are immediate and dramatic. But the architecture is the same one civilians live inside every day.
The fix will not be another stern letter after the fact. It requires changing the economics. As long as precise movement data remains easy to collect, easy to trade and hard to audit, every institution will keep discovering that commercially available does not mean harmless. It means responsibility was outsourced until somebody else found a use for the product.
There is also a procurement lesson here. Government agencies cannot preach resilience while issuing devices, browsers and software defaults that feed the same data economy they say adversaries are exploiting. If Chrome, advertising IDs and app permissions are creating operational risk, then the problem is not just bad actors buying data. It is a bureaucracy that has not priced privacy as infrastructure.
The deeper shift is psychological. For years, surveillance was sold as convenience. Then as innovation. Then as targeted advertising. Now it is showing up as battlefield targeting. That does not mean every data broker intended that outcome. It means incentive systems do not care about intent once the asset exists.
This is why platform power is never only about speech, search results or screen time. It is about who builds the map of human behavior, who monetizes it, and who eventually gets to use it. The United States is learning that a commercial panopticon cannot be safely partitioned between domestic marketing and foreign exploitation. Once the pattern of life is for sale, the buyer list becomes the threat model.