CalMatters: Who’s buying your personal data: Disney, GM, your insurer and bank. Here’s what they get
Summary
Data brokers are compiling extensive databases about individuals, using three primary types of data: information explicitly provided by consumers, information observed from their online activities, and inferences drawn from these data points. Companies such as Disney, General Motors, insurers, and banks are purchasing this data to gain insights into consumer behavior and characteristics.
IFF Assessment
The article details how personal data is collected and sold, which can be exploited by malicious actors for targeted attacks or social engineering, posing a risk to individuals and organizations.
Defender Context
This highlights the critical need for robust data protection measures and user privacy controls, as the aggregation and sale of personal data can fuel sophisticated phishing campaigns and other targeted social engineering attacks. Defenders should be aware of the types of information potentially available on individuals, which can inform threat modeling and incident response.