The shadow profile: what can be found is not what can be built
You Look Clean. Your File Doesn't.
A May 2026 audit of the data brokers registered in California found few meeting the state's disclosure rules. This brief asks what a conventional footprint review leaves unmeasured, what an adversary could assemble that no search would surface, and whether asking holders what they keep should come before deletion. Built from that audit, a federal regulator's study and practitioner observation. For principals and advisors who treat a clean search result as a measure of exposure.
Registered access
Read the complete brief.
Free with registration. Registration unlocks a collection of intelligence before you subscribe.
Register to readHow it happens
Primary · Mechanism · Identify and link
Join-key correlation
Separate records are linked on a shared key (email, phone, nickname, ID number) to assemble a profile no single source held.
More on identify and link →- Mechanism · Infer and profileBroker modeling and activation. Brokers turn signals into modeled claims and segments that buyers act on, whether or not they are accurate.
- Mechanism · Acquire and collectRe-acquisition after removal. Removed records persist or return: holders ignore requests, re-acquire from upstream sources or resale partners, or lapse once suppression is not held.
Topics
Data BrokersAggregation & Identity ResolutionBreach & Leaked DataBrowser & FingerprintingMonitoring & Alerting