The family graph is the file: what gets assembled, not what gets posted

The collapse of the targeting layer

Security researchers in July 2026 disclosed an infostealer whose operator panel ranks infected victims automatically, one of several recent tools automating the work around an attack rather than the exploit. This brief asks what that cluster means for a principal whose protection has rested on being one record among millions. It draws on the year's published threat research and the firm's model of target selection. For principals and security leads relying on a low profile.

What a coordinate discloses

Federal Trade Commission complaints against Gravy Analytics, Mobilewalla and InMarket give the most detailed public account of what the location data industry infers from movement records. This brief works that enforcement record backward to the derivation steps behind it, asks which inferences matter most to a protected person, and tests whether current rules reach them. Built from the complaints and orders, peer-reviewed mobility research and recent state privacy statutes. For security and legal functions assessing a principal's movement exposure.

Coverage is not resolution

Two Dollars, Seventeen Minutes

In June 2026 Swiss researchers showed language-model agents resolving location traces to named people unattended, just before California's broker deletion platform became enforceable. This brief asks what protection and removal programs report to those paying for them, and whether it reveals what an adversary can still learn. Built from that study, re-identification research, independent tests of removal services and state agency reporting. For family offices and boards grading a protection program.