Mozilla breaks into the anti-data broker game

Martin Shelton

Principal Researcher

An animated image of a shark fin on a computer screen
Electronic Frontier Foundation (CC BY 2.0)

It’s the Digital Security Training team at Freedom of the Press Foundation (FPF), with security news that keeps you, your sources, and your devices safe. If someone has shared this newsletter with you, please subscribe here.

In the news

You may or may not be seeking the services of a marriage broker this Valentine’s Day, but one thing you likely don’t want to fall prey to are the dealings of a data broker. 

Hundreds of data brokers (e.g., Intelius, Spokeo) aggregate and sell access to personal data, such as phone numbers, emails, addresses, and even purchasing habits collected through loyalty card programs, social media sites, apps, trackers embedded in websites, and more. 

Get Notified. Take Action.

Through a partnership with data removal service Onerep, Mozilla is introducing a new $8.99 monthly subscription service it calls Mozilla Monitor Plus, which automatically scans for your personal data on data broker websites. When found, the service will attempt to have your data removed through automated takedown requests. Read more here.

What you can do

  • Mozilla Monitor offerings appear to only be available in the United States. If you’d like to pursue data broker removal services outside of the U.S., DeleteMe ($129/year) offers services in several countries, though how many data brokers it covers varies significantly by region.
  • Dealing with data brokers ain’t cheap. It’s possible to manually request data removals yourself from a variety of data brokers by following instructions from Yael Grauer's Big Ass Data Broker Opt-Out List. This will absolutely take more of your time because data brokers occasionally repopulate their troves with data from other sources. But making manual requests yourself is an option.
  • If you have personally identifiable information that you’d like to make less easily searchable, you can also request to have it removed from Google. This will not remove the websites that host this information, only Google’s listings. Other search engines may still link to the website at issue.
  • Check out our recommended guides to prepare for online harassment.

Updates from my team

  • Join FPF on Feb. 22, 2024, at 7 p.m. EST for a virtual training on using the U.S. Press Freedom Tracker for your reporting, and a discussion of why covering press freedom issues matters for journalists and their readers. This event is in honor of Student Press Freedom Day, but all journalists — students or not — are welcome! Register here.
  • Are you in Arizona? My colleague David Huerta will be at CactusCon 2024. Come say hi in Mesa, Arizona, this Feb. 16–17, and grab some FPF stickers. https://www.cactuscon.com

We are always ready to assist journalists with digital security concerns. Reach out here, and stay safe and secure out there.

Best,
Martin

Donate to support press freedom

Your support is more important than ever.

Read more about Digital Security Digest

Google backtracks on ad privacy plan

Google has a habit of hitting the brakes on products and features β€” so much so that it’s become something of a meme to be β€œkilled by Google.” This time it decided to backtrack on its long-standing plan to replace traditional tracking in its Chrome browser.

Beware fraudulent CrowdStrike emails

Last Friday, computer systems worldwide were taken down by a defective update from enterprise cybersecurity vendor CrowdStrike. In the wake of the outage, the U.S. Cybersecurity and Infrastructure Agency is warning of phishing emails, with attackers posing as CrowdStrike customer support.

What to do about AT&T breach

Around 110 million AT&T subscribers were affected by a data breach from May 1 to Oct. 31, 2022, TechCrunch reported.