Why does disabling ad tracking on government devices matter?
The US military's move to disable ad tracking on government-issued phones and computers is a vital first step in reducing the risk of location-based targeting by foreign adversaries. Advertising trackers gather location data that can be exploited to pinpoint troop movements and deployments. By removing these trackers, the military closes an important data leak that could jeopardize operational security and personnel safety.
This action means less location data about military assets is shared with commercial entities and data brokers, reducing the chances that hostile actors can access real-time whereabouts via these sources.
What risks still remain despite disabling ad tracking?
Disabling trackers on government devices doesn't fully eliminate the danger. Troops frequently carry personal smartphones and devices that continue to generate location data accessible to commercial firms. This data can be purchased and used for targeted tracking. Additionally, data collected in the past—prior to disabling ad tracking—remains in circulation among data brokers, posing ongoing risks.
Due to the persistent presence of personal devices and existing location data, adversaries may still locate or follow individual service members or military operations. This creates a significant cybersecurity blind spot that current policies have yet to remedy.
What improvements are required to adequately protect military personnel?
Protecting troops from location-based targeting requires a comprehensive approach beyond turning off ad tracking on official devices. This includes:
- Implementing policies and awareness programs encouraging or mandating restrictions on personal device usage in sensitive environments, especially abroad.
- Engaging with commercial data brokers to understand and limit access to location data tied to military personnel and facilities.
- Conducting thorough audits of existing purchased data to identify leaks and develop strategies to purge or obscure sensitive location information.
- Encouraging the Department of Defense inspector general and cybersecurity authorities to investigate and recommend policy changes that address the sale and exploitation of military-related location data.
Only by addressing personal device exposure and existing data retention will the military substantially reduce the opportunities for adversaries to target service members via location tracking.
Key takeaway for military cybersecurity and personnel safety
While disabling ad tracking on government-issued devices is a valid and necessary measure to limit location exposure, it is far from sufficient. Personal devices carried by service members continue to leak valuable location data, and previously collected information remains accessible for sale, presenting persistent security risks. To enhance protection, military leaders must expand safeguards to address personal device usage and work with data brokers to curtail the availability of sensitive location information. Continuous policy review and enforcement are essential steps to prevent targeted attacks that exploit commercial location data.