Loading story…
The U.S. Department of Defense disabled mobile advertising identifiers on government-managed iPhones, Android devices, and Windows computers used by the Army, Air Force, Navy, Marine Corps, and U.S. Special Operations Command. The action followed reports that foreign adversaries could buy commercially brokered app-location data and use identifiers such as Apple’s IDFA and Google’s GAID to identify and track U.S. personnel, including forces deployed in the Middle East; the Air Force implemented its controls in July 2026.
The controls reduce tracking risk on managed government equipment but do not protect personal phones brought onto bases or carried by troops and contractors, nor do they eliminate exposure through social media and other commercial data sources. U.S. Central Command had warned that adversaries could exploit such data, while Senator Ron Wyden and Representative Pat Harrigan called for a Pentagon inspector-general review of military safeguards; Wyden also noted that U.S. intelligence agencies and the FBI purchase commercially available location data without warrants.
See the reporting duties and controls this puts on the clock.
6 events from the most recent confirmed update back to the earliest known activity.
The U.S. Navy reportedly told personnel to clean up their social-media profiles because adversaries could exploit the information for open-source intelligence.
U.S. troops in Jordan were reportedly told their personal devices would be confiscated to prevent adversaries from accessing reactions, photographs, and footage on the phones.
The U.S. Air Force deployed controls disabling or restricting advertising identifiers on its government-managed devices.
U.S. Central Command reportedly warned of multiple threat reports involving adversaries exploiting commercially available location data to track U.S. forces.
Senator Ron Wyden and Representative Pat Harrigan asked the Pentagon inspector general to investigate whether the armed forces had adequately mitigated risks from commercially traded location data.
The Department of Defense reportedly disabled advertising identifiers on government-managed iPhones, Android devices, and Windows computers used by military personnel, following concerns that commercially brokered location data could help adversaries track troops. The measure covered the Army, Air Force, Navy, Marine Corps, and U.S. Special Operations Command.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See what this changes for your reporting obligations and which controls it puts on the clock.
2 references tracked. Mallory keeps watching after this page renders.
bitdefender.com
Open sourcecyberveille.ch
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
The U.S. Department of Defense has confirmed that foreign adversaries used commercially available location data to target and surveil American military personnel in operational theaters, including the Middle East. A newly disclosed U.S. Central Command letter said it had received multiple threat reports involving hostile actors exploiting data collected from phones and computers through the advertising and data-broker ecosystem. Lawmakers led by Senator Ron Wyden and Representative Pat Harrigan said the disclosures amount to the first public confirmation that purchased commercial geolocation data was used against U.S. troops in active war zones, and warned that the ad-tech industry now poses a **national security threat**. The reports say Pentagon safeguards were insufficient: service members were allowed to use personal devices in operational areas, no policy required geolocation to be disabled in active war zones, and even government-issued devices did not fully block advertising-related tracking. Critics said the risk had been documented for years, citing contractor briefings dating back to 2016, demonstrations tracing personnel from U.S. bases to a covert site in Syria, and later studies showing brokers could easily sell sensitive data on service members. The Pentagon said it is moving to a new mobile device management system to better disable location services, but lawmakers warned that broader use of bring-your-own-device policies and weak regulation of data brokers continue to leave troops exposed.
Jun 29, 2026
A Purdue University-led analysis of more than 220 mobile apps marketed to US service members found extensive third-party code exposure, with **64%** of the apps containing embedded SDKs and **40%** collecting or sharing more data than their Apple App Store or Google Play privacy disclosures stated. Researchers identified **76 SDKs** in total, including components linked to companies in China, Russia, Israel, India, and Germany, and reported that roughly **7%** of the apps included third-party code from countries the Pentagon considers adversarial. The findings raised supply-chain and surveillance concerns because apps aimed at troops can access sensitive information about where service members live, work, and deploy. Twelve apps, including several associated with state National Guard organizations, contained **Huawei HMS Core**, though researchers said they did not observe data being transmitted to Huawei servers. The study also found that foreign code was sometimes introduced indirectly through software dependencies, underscoring how military-targeted apps can inherit hidden risk from commercial development tools.
Jul 21, 2026
Investigators suspect Iran or Iranian-aligned actors used commercial advertising data and vulnerable cellular infrastructure to help locate U.S. military personnel during the recent Iran-U.S. conflict. Reporting cited by multiple sources says troops moved from bases into hotels and civilian buildings in locations including Iraqi Kurdistan and Bahrain, where repeated mobile app bid requests may have exposed device identifiers and precise movement patterns through real-time bidding systems. Researchers said social media, human sources, and telecom signaling data were also likely part of the targeting picture, although attribution for specific strikes or attacks remains unconfirmed. Citizen Lab said the activity reflects a long-running weakness in global mobile networks, where **SS7-style** attacks and broader telecom interconnect abuse can still be used to track phones despite years of warnings. The combined reporting underscores that commercially available location data and insecure carrier infrastructure can create a persistent intelligence exposure for deployed personnel, allowing state actors and surveillance vendors to identify, monitor, and potentially target sensitive movements outside traditional military facilities.
Jul 24, 2026