The Data Broker Industry Explained: Who Profits From Your Personal Information
There is a $290 billion industry built on collecting, packaging, and selling your personal information — and most people have never heard of the companies that run it. Data brokers operate in the background of modern life, assembling detailed profiles on hundreds of millions of Americans from public records, commercial transactions, online activity, and other sources.
The 2025 data breach landscape — 3,322 reported incidents, $10.22 million average breach cost, 278.8 million victim notification letters — only accelerates the flow of personal data into broker ecosystems. This article explains who the major players are, how your data moves from collection to sale, who buys it, and what you can do about it.
What Is a Data Broker?
A data broker is any company whose primary business involves collecting personal information about individuals and licensing or selling it to other organizations. The individuals whose data is collected are not customers — they are the product.
The Federal Trade Commission defines data brokers as companies that collect consumers' personal information and resell or share that information with others. The industry includes thousands of companies, from household names to obscure entities most people will never encounter directly.
What distinguishes data brokers from other companies that handle personal data is that brokers typically have no direct relationship with the people whose data they collect. You did not sign up for their service. You did not agree to their terms. In most cases, you do not know they exist.
The Major Players
The data broker industry is dominated by a handful of large corporations, supported by thousands of smaller operators.
Acxiom (now Kinesso / IPG)
Acxiom is one of the oldest and largest data brokers in the world, founded in 1969 in Conway, Arkansas. The company maintains profiles on approximately 2.5 billion consumers globally. In 2018, Acxiom's marketing data division was acquired by Interpublic Group (IPG) and rebranded as Kinesso.
Acxiom's data categories include demographic information, purchase behavior, lifestyle interests, financial indicators, and household composition. The company sources data from public records, consumer surveys, retail transactions, and online activity.
Experian
While primarily known as a credit bureau, Experian operates one of the largest data brokerage businesses in the world. Its ConsumerView and Mosaic products segment consumers into thousands of categories based on financial behavior, demographics, and lifestyle data.
Experian's dual role is notable: the same company that maintains your credit report also sells marketing data derived from your financial behavior. The company reported $7.1 billion in revenue in fiscal year 2025.
Oracle Data Cloud (now Oracle Advertising)
Oracle built a massive data brokerage operation through acquisitions, purchasing BlueKai, Datalogix, AddThis, Moat, and Grapeshot. Oracle Data Cloud provided advertisers with detailed consumer profiles for ad targeting.
In 2024, Oracle announced it was shutting down its advertising business, citing market shifts. However, the underlying data assets and practices it helped normalize — tracking consumer behavior across online and offline channels — continue throughout the industry.
CoreLogic
CoreLogic specializes in property and real estate data, maintaining records on over 99% of US residential properties. The company sells detailed property reports that include ownership history, mortgage information, tax assessments, and neighborhood demographics.
For individuals, CoreLogic's data means your home address, purchase price, estimated home value, and mortgage details are readily available to anyone willing to pay.
LexisNexis Risk Solutions
LexisNexis maintains one of the most comprehensive consumer databases in the world, combining public records (court filings, liens, bankruptcies, property records) with commercial data. Its products are used by insurance companies, financial institutions, law enforcement, and government agencies.
LexisNexis's consumer database, known as Accurint, contains records on virtually every adult in the United States, including addresses, phone numbers, relatives, associates, employment, and vehicle registrations.
People-Search Sites
Below the enterprise-scale brokers sits a layer of consumer-facing people-search sites: Spokeo, BeenVerified, WhitePages, TruePeopleSearch, Radaris, PeopleFinder, Intelius, and dozens of others. These sites make broker data searchable by anyone with an internet connection, often for free or for a few dollars per report.
People-search sites are the most visible and most directly harmful layer of the data broker ecosystem. They are the tool that enables stalking, doxxing, and targeted harassment by making personal information trivially accessible.
How Your Data Flows: From Collection to Sale
Understanding the data broker industry requires understanding the pipeline.
Stage 1: Collection
Data brokers pull from a wide range of sources:
- Public records: Voter registration, property deeds, court filings, marriage and divorce records, business registrations, and professional licenses. These records are public by law, and brokers scrape them at scale.
- Commercial sources: Loyalty program data, purchase histories from retailers, warranty registrations, magazine subscriptions, and survey responses. When you fill out a form, that data often ends up with a broker.
- Online activity: Website cookies, social media profiles, app usage data, location data from mobile devices, and browsing history collected through tracking pixels and third-party scripts.
- Financial data: Credit header information (name, address, Social Security number), transaction data, and credit behavior indicators.
- Other brokers: Data brokers buy from each other, creating an interconnected network where removing your data from one source does not guarantee removal from downstream buyers.
Stage 2: Aggregation and enrichment
Raw data from individual sources is limited. The value brokers provide is aggregation — linking records across sources to build comprehensive profiles. A voter registration record gives a broker your name and address. Property records add your home value. Purchase data adds your spending habits. Online tracking adds your interests and browsing behavior.
The result is a profile that may include hundreds of data points about a single individual, organized into categories that buyers can query and filter.
Stage 3: Segmentation and packaging
Brokers package consumer data into segments designed for specific buyers. Common segments include:
- Marketing audiences: "Health-conscious millennials in suburban areas" or "high-net-worth retirees interested in travel"
- Risk scores: Creditworthiness indicators, fraud risk assessments, tenant screening scores
- Identity verification: Products that confirm whether a person is who they claim to be
- People searches: Individual lookup products sold to consumers and businesses
Stage 4: Sale and licensing
Data is sold through direct licensing agreements, API access, real-time bidding in advertising exchanges, and consumer-facing search products. Pricing ranges from fractions of a cent per record in bulk advertising data to hundreds of dollars per comprehensive background report.
Who Buys Data Broker Data — And Why
Advertisers and marketers
The advertising industry is the largest buyer of broker data. Brands use consumer profiles to target ads based on demographics, interests, purchase history, and predicted behavior. This is why you see ads for products you recently researched — or products a broker's algorithm predicted you might want.
Insurance companies
Insurers use broker data for underwriting and pricing decisions. Your driving record, property ownership, health indicators inferred from purchases, and neighborhood risk scores all factor into the premiums you pay.
Financial institutions
Banks and lenders use broker data for credit decisions, fraud detection, and customer acquisition. Your financial profile extends well beyond your credit report — it includes spending patterns, assets, and behavioral indicators that brokers compile.
Employers and landlords
Background check companies, which are themselves a type of data broker, sell reports used in hiring and tenant screening decisions. Criminal records, eviction histories, employment verification, and credit data all flow through broker pipelines.
Government agencies
This is one of the most controversial uses of broker data. Federal agencies including Customs and Border Protection (CBP), Immigration and Customs Enforcement (ICE), the Internal Revenue Service (IRS), and the FBI have purchased data from brokers like Venntel, Babel Street, and LexisNexis to track individuals without obtaining warrants.
In 2024, the Office of the Director of National Intelligence published a report acknowledging that government purchases of commercially available data raise significant civil liberties concerns. The Government Accountability Office has called for clearer rules governing these purchases.
The practice effectively allows government agencies to bypass Fourth Amendment protections by buying data from private companies rather than obtaining court orders to collect it directly.
Individuals seeking personal information
People-search sites sell to anyone: suspicious spouses, estranged family members, amateur investigators, scammers, and — as documented by the National Network to End Domestic Violence — stalkers and abusers.
The Push for Regulation
The data broker industry faces growing regulatory pressure from multiple directions.
State-level action
Twenty states now have comprehensive consumer privacy laws that give residents some control over their data. California's DELETE Act, with its DROP tool launching in August 2026, represents the most aggressive state-level response, creating a centralized opt-out mechanism for all registered data brokers.
Vermont and California require data brokers to register with the state, providing at least a public record of which companies are operating in the space. Vermont's registry lists over 500 registered data brokers.
Federal proposals
The American Data Privacy and Protection Act (ADPPA) has been introduced in Congress multiple times but has not passed. Industry lobbying, preemption disputes, and disagreements over enforcement mechanisms have stalled progress.
Executive actions have targeted specific practices — the Biden and Trump administrations both took executive action on data broker sales to foreign adversaries — but comprehensive legislation remains elusive.
International pressure
The EU's General Data Protection Regulation (GDPR) has forced global data brokers to implement stronger protections for European residents. This has created a two-tier system where the same companies offer EU consumers rights they deny to Americans.
What Individuals Can Do
The data broker industry's size and complexity can feel overwhelming, but individuals are not powerless.
1. Opt out directly
Most data brokers honor opt-out requests, though the process is intentionally cumbersome. The Privacy Rights Clearinghouse maintains a list of data brokers with opt-out links. Major people-search sites (Spokeo, WhitePages, BeenVerified, Radaris) each have their own opt-out processes that must be completed individually.
The challenge is scale: there are hundreds of brokers, each with different processes, and many re-list your data within months.
2. Use automated removal services
Services like Sirveil automate the opt-out process by scanning for your data across broker sites, submitting removal requests, and monitoring for re-listings. This converts a manual, ongoing burden into a managed process.
Sirveil's AI-powered scanning identifies your profiles, submits removals, monitors the dark web for breached data, and files FOIA requests — starting at $7.99/month, or $79.99/year on the annual plan.
3. Minimize your data footprint going forward
- Use privacy-focused browsers and search engines
- Decline loyalty programs that sell data
- Read privacy policies before submitting information (look for "third-party sharing" language)
- Use a P.O. box or mail forwarding service to keep your physical address off public records
- Opt out of data sharing when given the choice (few people do, which is what brokers count on)
4. Support regulation
Contact your state and federal legislators. The data broker industry thrives partly because most people do not know it exists. Awareness drives regulatory action — California's DELETE Act passed because constituents demanded it.
The Fundamental Problem
The data broker industry is built on an information asymmetry: brokers know everything about you, and you know almost nothing about them. They collect your data without asking, sell it without telling you, and make it difficult to opt out even when the law requires them to allow it.
The 2025 breach statistics — 3,322 incidents, supply chain breaches doubling to 1,251, $10.22 million average breach cost — only feed the machine. Every breach is a new data source. Every new source is new inventory to sell.
Until comprehensive federal regulation forces transparency and accountability, individuals must take their own protective action. The first step is understanding who profits from your personal information. The next step is cutting off their supply.
The Sirveil Team builds privacy tools that put individuals back in control of their personal data. Sirveil's AI-powered platform scans data broker sites and the dark web for your exposed information, automates removal requests, and provides continuous monitoring — because a $290 billion industry should not be built on your data without your consent. Learn more at sirveil.ai.