Protective intelligence
ObscureIQ / Intelligence deskIndependent analysis. Protective judgment.
← Back to the libraryRecord / CB-070
Command Brief / CB-070

After the tunnel: the three pipes a VPN does not close

A VPN Closes One of Four Doors

The intelligence

The standard answer to browsing-privacy concerns is a VPN. Read against the 2024 FTC action over Avast's Jumpshot sales, the 2025 LummaC2 infostealer disruption and the Mixpanel compromise that exposed Pornhub Premium records, this brief asks where browsing history is recorded, by whom, and which of those records a tunnel reaches. Built from regulator filings, Justice Department reporting and vendor retention documentation. For advisors checking a principal's privacy controls against the exposure.

Registered access

Read the complete brief.

Free with registration. Registration unlocks a collection of intelligence before you subscribe.

Register to read

Topics

VPNBreach & Leaked DataData BrokersData MinimizationPhone Numbers & SIM
Follow the thread

Cross-referenced intelligence.

CB-070-Aregistered
Annex

Four-surface browser history collection: the technical detail

A technical companion to CB-070 that takes each place browsing records are collected in turn, setting out who observes it, what is retained and for how long, how records escape, which control reduces the exposure and how an advisor can confirm the control works. Retention figures are tied to dated vendor documentation. For security advisors auditing a principal's current controls, household technical staff carrying out changes, and reviewers who want to test the parent brief's claims against their sources.

VPNBreach & Leaked DataData Brokers
Undated referenceView record