The Biometric Threat to Clients

The biometric threat to principals

Most of the Field Cannot Reach You

Seventy-seven biometric modalities, from face and fingerprint to gait and DNA, are scored in this standing assessment against a resourced private adversary. It asks which traits can actually be acquired covertly, where a reading pools once captured, and which traits can be protected, which only monitored and which never withheld. Consolidated in September 2026 from six earlier briefs. For family offices deciding where biometric defense is worth the effort.

How it happensBiometric capture and matching

The database, not the scanner

Your Palm Is in Two Databases

A fingerprint reader on a door captures one trait at one moment, but the reading is enrolled into stores that are increasingly linked, breached, brokered or queried. This brief asks which biometric stores hold a principal's records, who governs each, and what lever exists to remove a template when the holder changes. Built from operators' own published figures for national, forensic and vendor systems. For family offices weighing which enrollments to accept.

How it happensBiometric capture and matching

The trait you cannot recall

You Never Took a DNA Test

A stolen fingerprint is a credential problem, and that frame is routinely applied to DNA, where there is no genomic login to defeat. This brief asks what threat a principal's genome actually poses, including exposure through a relative's test and a sample that arrives somewhere the principal never was. Built from peer-reviewed genetic genealogy and forensic research and dated cases. For family offices whose principals never took a DNA test.

How it happensBiometric capture and matching

When voice stopped being proof

Amazon's Replacement for a Voiceprint

Two large cloud providers have retired their stand-alone speaker verification services just as cloned voices became cheap and convincing. This brief asks what a voice can still prove on its own, where a principal's enrolled voiceprints may still be in use, and what should be layered beside them. Built from vendor retirement notices, a broadcast test of cloned voices against financial institutions and industry analysis. For principals and family offices.

How it happensVerification substitution

The gap is the price of a workable definition

The Law Carves Out Pupil Dilation

Five states have written neural data into their privacy statutes, and each draws a limit on what counts, one of them naming pupil dilation and motor activity as outside it. This brief asks why those limits exist, what falls outside them, and what that means for a principal exposed through wearables and headsets. Built from the statutes, their legislative analyses and federal proposals as of September 2026. For counsel and family offices tracking neural and biometric privacy.

How it happensBiometric capture and matching

The scoring framework

Every verdict in the firm's biometric threat series traces back to one scoring analysis. This annex to CB-089 sets it out so its conclusions can be assessed as reasoning rather than taken on trust: the unit of analysis, the lenses applied and the adversary each modality is judged against, with candor about where it falls short of a reproducible model. For advisors and technical reviewers weighing how far the series should shape a principal's biometric decisions.

How it happensBiometric capture and matching

The MSG dossier was already written

We Found You in the MSG Breach

Reporting on the June 2026 leak of data stolen from Madison Square Garden described assessment records on named people, not only customer fields. Prepared for client teams, this edition asks how to establish what the corpus holds on a given principal, how far reporting on its contents can be trusted, and where the class action sits beside protection work. Built from breach-index data, press review and legal reporting. For family offices scoping one principal's exposure.

How it happensExtortion and leak publication

The Quiet Disappearance of the Private Transaction

Cash isn't disappearing, but transactional privacy is. Learn how digital payments create permanent records and why private transactions still matter in a surveillance economy.

The camera nobody sees.

The Stranger Who Already Knows You

A low-priced line of consumer camera glasses launched in June 2026, over a decade after the public rejected an earlier face-worn camera. This first of three briefs on worn cameras asks what a stranger can learn once a recording is linked to the rest of a person's identity, and what a person worth recognizing should now assume. Built from public reporting, court records, regulator actions, 2026 academic research and practitioner experience. For principals and family offices adjusting a protective posture.

How it happensAmbient and worn capture

The Financial Identity Layer

Every payment passes through identity infrastructure including banks, card networks, fraud systems, and regulatory monitoring. These systems create one of the most persistent identity layers in the digital world.

Domain Intelligence Is No Longer About Domains

Private equity, payment networks, and holding companies now control key domain intelligence platforms. Learn how consolidation is reshaping attribution, signal quality, and pre-attack visibility in 2026.

Crumbs for a Crown

Gmail’s expanding AI features increase content analysis and retention. Learn why high-risk individuals should reassess Gmail and reduce exposure.

Shop Quietly

Online shopping exposes your personal data to retailers, trackers, and data brokers. Learn how masked emails, virtual cards, and guest checkout reduce your digital footprint and block long-term profiling. Practical, fast, and effective privacy tactics.

The Strategic Guide to Virtual Credit Cards

Learn how virtual credit cards work, why they’re safer than using your real card, and how they protect your privacy when shopping online. A simple guide to anonymous and secure digital payments.

Biometric Identifiers Executives Can’t Ignore

Executives face rising biometric risks. Learn how facial, voice, and DNA identifiers expose leaders. And what steps protect against biometric exploitation.