Data Brokers: Who Is Selling Your Personal Information in 2026

Every time you sign up for a newsletter, use a loyalty card, or scroll through a mobile app, someone is likely watching, recording, and profiting. The multi-billion dollar industry of data brokers selling personal information operates largely in the shadows, quietly aggregating details about your life and reselling them to advertisers, insurers, employers, and even government agencies.

In this guide, we'll unpack who these data brokers are, what they know about you, how they make money, and — most importantly — what you can do to reclaim your privacy in 2026.

What Are Data Brokers?

Data brokers are companies that collect personal information about individuals from a wide range of sources and sell, license, or share that information with third parties. They typically operate without any direct relationship with the people whose data they trade.

Unlike social media platforms or retailers who gather data from their own users, data brokers act as intermediaries. They combine records from public sources, commercial transactions, online tracking, and other brokers to build detailed profiles that can include hundreds — sometimes thousands — of data points per person.

The Scale of the Industry

The global data broker market was valued at over $300 billion in 2025 and continues to grow at double-digit rates. Some estimates suggest that major brokers hold profiles on more than 700 million people worldwide, with each profile updated dozens of times per year.

Types of Data Brokers

Not all data brokers do the same thing. Understanding the different categories helps clarify how your information moves through the ecosystem.

1. Marketing and Advertising Brokers

These are the most common. They compile demographic, behavioral, and interest-based profiles used for targeted advertising. Companies like Acxiom, Epsilon, and Oracle Data Cloud fall into this category.

2. People Search Sites

Sites like Spokeo, BeenVerified, Whitepages, and Intelius aggregate public records, social media data, and other sources to create searchable profiles that anyone can look up — often for a fee.

3. Risk Mitigation Brokers

Companies such as LexisNexis Risk Solutions and Thomson Reuters CLEAR sell data to insurance companies, financial institutions, and law enforcement for fraud detection, background checks, and identity verification.

4. Health Data Brokers

A more controversial subset, health data brokers collect information from pharmacy loyalty programs, wellness apps, and even prescription records (in de-identified form). IQVIA and Optum are major players here.

5. Location Data Brokers

Companies like SafeGraph, Cuebiq, and Veraset specialize in aggregating precise geolocation data from mobile apps, often selling it to retailers, real estate firms, and government agencies.

What Information Do Data Brokers Actually Have?

The depth of information collected by data brokers surprises most people. A typical consumer profile can include:

Basic identifiers: Name, address, phone number, email, date of birth, Social Security number (in some cases)
Demographics: Age, gender, race, ethnicity, marital status, household size, presence of children
Financial data: Estimated income, credit score range, homeownership status, mortgage details, investments
Purchase history: Products bought, brands preferred, loyalty program memberships
Online behavior: Websites visited, search history, apps used, content consumed
Location patterns: Home, work, commute routes, frequented businesses
Health inferences: Likely medical conditions, medications, lifestyle habits
Political and religious views: Voter registration, donation history, inferred beliefs
Life events: Recent moves, new job, marriage, birth of a child, divorce

Some brokers segment consumers into thousands of categories with names like "Rural Everlasting" (older, low-income rural residents) or "Ethnic Second-City Strugglers" — labels that reveal how coldly personal data is commodified.

How Do Data Brokers Collect Your Information?

Data brokers cast a wide net. Here are the primary sources they draw from:

Public Records

Court records, property deeds, marriage and divorce filings, voter registrations, business licenses, and professional certifications are all fair game. In most jurisdictions, this information is legally accessible.

Commercial Sources

Retailers, magazine subscriptions, warranty registrations, loyalty programs, and charities routinely sell or share customer lists with brokers. Every time you write your ZIP code at checkout, that data can end up in a broker's database.

Online Tracking

Cookies, tracking pixels, browser fingerprinting, and mobile SDKs (software development kits embedded in apps) feed a constant stream of behavioral data. Advertising exchanges alone generate trillions of data points daily.

Data Partnerships and Purchases

Brokers buy and trade data among themselves, cross-referencing information to fill in gaps and improve accuracy. A single profile might be assembled from dozens of overlapping sources.

Leaked and Breached Data

While reputable brokers claim they avoid breached data, less scrupulous operators absolutely traffic in leaked credentials, addresses, and other information from major breaches.

Who Buys Data From Brokers?

The customer base for personal data is vast and diverse:

Advertisers and marketers looking to target specific consumer segments
Insurance companies assessing risk and setting premiums
Banks and lenders for creditworthiness and fraud checks
Employers running background checks
Landlords vetting potential tenants
Political campaigns micro-targeting voters
Debt collectors and private investigators
Government agencies, including law enforcement and immigration authorities
Researchers and academics
Scammers and malicious actors — unfortunately, poorly vetted brokers sometimes sell to bad actors

The Biggest Data Brokers in 2026

Here's a comparison of some of the most influential data brokers operating globally:

Broker	Primary Focus	Estimated Profiles	Opt-Out Available?
Acxiom (LiveRamp)	Marketing, identity resolution	2.5 billion+	Yes
Epsilon (Publicis)	Marketing, transactional data	250 million	Yes
Oracle Data Cloud	Ad targeting, B2B	2 billion+ IDs	Limited
LexisNexis Risk Solutions	Risk, insurance, legal	500 million+	Yes (restricted)
Spokeo	People search	600 million	Yes
BeenVerified	People search, background	Hundreds of millions	Yes
Whitepages	Contact info, reverse lookup	250 million+	Yes
Experian Marketing Services	Credit-adjacent marketing	300 million+	Yes

The Real Risks of Data Broker Activity

While targeted advertising might feel like a minor annoyance, the risks of unchecked data broker activity go much deeper.

Identity Theft and Fraud

Detailed personal profiles make it easier for criminals to impersonate victims, answer security questions, or craft convincing phishing attacks.

Discrimination

Data-driven decision-making in hiring, lending, housing, and insurance can encode bias — sometimes illegally — based on inferred race, health status, or economic circumstances.

Stalking and Harassment

People search sites have been repeatedly linked to real-world stalking cases. Cheap, easy access to home addresses puts domestic violence survivors, journalists, and activists at serious risk.

Government Surveillance

Agencies increasingly buy data from brokers to sidestep legal protections that would otherwise require warrants. This creates a workaround for constitutional privacy protections in many countries.

Manipulation and Micro-Targeting

Detailed psychological profiles enable manipulation at scale — from predatory advertising aimed at vulnerable people to political disinformation campaigns tailored to individual biases.

How to Protect Yourself From Data Brokers

You'll never fully escape the data broker ecosystem, but you can significantly reduce your exposure. Here's a practical, step-by-step approach.

1. Opt Out of Major Brokers

Most reputable brokers offer opt-out processes, though they're often deliberately tedious. Prioritize these:

Acxiom (acxiom.com/optout)
Epsilon (epsilon.com/us/consumer-information)
LexisNexis (optout.lexisnexis.com)
Spokeo, BeenVerified, Whitepages, Intelius (each has its own opt-out form)
Oracle Data Cloud (datacloudoptout.oracle.com)

2. Use a Data Removal Service

Services like DeleteMe, Kanary, Optery, and Incogni automate opt-out requests across hundreds of brokers. Expect to pay $100–$250 per year, but the time savings are significant.

3. Minimize Data Collection at the Source

Use privacy-focused browsers like Brave or Firefox with strict tracking protection
Enable encrypted DNS (DNS-over-HTTPS) on your devices
Block trackers with extensions like uBlock Origin or Privacy Badger
Turn off ad IDs on iOS and Android
Review app permissions regularly and revoke location access from apps that don't need it

4. Guard Your Contact Information

Use email aliases (from services like SimpleLogin, Firefox Relay, or Apple's Hide My Email) when signing up for anything non-essential. Consider a secondary phone number for online forms. When sharing links, use a privacy-respecting shortener like Lunyb that doesn't harvest recipient data — you can read our honest Lunyb review for more details.

5. Freeze Your Credit

Placing a credit freeze with the major bureaus makes it much harder for identity thieves to open accounts in your name — regardless of what brokers know about you.

6. Exercise Your Legal Rights

Depending on where you live, you may have strong legal protections:

EU/UK: GDPR gives you the right to access, correct, and delete your data
California: CCPA/CPRA offers similar rights, plus the ability to opt out of data sales
Other US states: Colorado, Virginia, Connecticut, Utah, and a growing list of states have enacted privacy laws
Brazil: LGPD provides GDPR-like protections

Submitting deletion requests under these laws is often more effective than voluntary opt-out forms.

The Regulatory Landscape in 2026

Governments are slowly catching up. California's Delete Act, which took effect in 2024, requires data brokers to register with the state and provides a centralized deletion mechanism launching in 2026. The EU's Digital Services Act imposes stricter transparency requirements on ad-tech, and several US states have introduced comprehensive privacy laws.

However, enforcement remains uneven, and the industry continues to evolve faster than regulation. Expect more class-action lawsuits, FTC actions, and international coordination in the coming years — but don't wait for laws to protect you.

The Bigger Picture: Why This Matters

Data brokers aren't inherently evil — some genuinely help detect fraud, verify identities, or support legitimate research. But the current ecosystem operates with almost no consent, minimal transparency, and shockingly little accountability.

Every piece of personal information in circulation increases your attack surface. The more that's known about you, the easier it is to manipulate, defraud, discriminate against, or surveil you. Protecting your data isn't paranoia — it's basic hygiene in a digital economy that treats your identity as a product.

Small choices compound over time. Using privacy-conscious tools, opting out where you can, and being thoughtful about what you share online won't make you invisible, but they will meaningfully shrink your data footprint.

Frequently Asked Questions

Is it legal for data brokers to sell my personal information?

In most jurisdictions, yes — though laws are tightening. In the US, data brokers operate largely under a patchwork of state laws. In the EU and UK, GDPR requires a legal basis for processing personal data, which limits (but doesn't eliminate) broker activity. Sensitive categories like health, biometrics, and children's data face stricter rules everywhere.

How can I find out what data brokers know about me?

Under GDPR, CCPA, and similar laws, you can submit a Subject Access Request (SAR) or "Right to Know" request to any broker. They must disclose what data they hold, where it came from, and who they've shared it with. Start with the largest brokers like Acxiom, Epsilon, and LexisNexis.

Are data removal services like DeleteMe worth the money?

For most people, yes. Manually opting out of hundreds of brokers can take dozens of hours, and brokers often re-add your information within months. Automated services handle recurring removals and typically cover 100+ brokers for $100–$250 annually. If your time is valuable or you're at elevated risk (public figure, survivor of harassment), they're a smart investment.

Can data brokers get my Social Security number or financial account details?

Reputable marketing brokers generally don't sell SSNs or account numbers. However, risk mitigation brokers like LexisNexis do handle SSNs for verification purposes, and data breaches frequently expose these details to less scrupulous operators on gray and dark markets. Freezing your credit and using strong authentication are essential defenses.

Does using a privacy-focused browser really make a difference?

Absolutely. Browsers like Brave, Firefox (with strict settings), and Safari block many third-party trackers by default, drastically reducing the behavioral data that feeds into broker profiles. Combined with encrypted DNS, tracker-blocking extensions, and email aliasing, you can cut your online tracking exposure by 70% or more.

Final Thoughts

The industry of data brokers selling personal information thrives on obscurity. The less you know about it, the more they profit. But awareness is the first step toward control — and small, consistent actions can dramatically reduce your exposure over time.

Start with the biggest brokers, layer in privacy tools, exercise your legal rights, and treat every request for your personal information with healthy skepticism. Your data is valuable — you deserve to decide who profits from it.

For more on protecting your digital footprint, check out our guides on privacy-respecting URL shorteners and how tools like Lunyb are built with user privacy in mind.