We investigated, then Congress did. They found data brokers cost you billions

Your personal data is being sold right now, and it’s costing you money you never agreed to spend. Congress just confirmed what we already suspected: data brokers are bleeding Americans dry to the tune of $21 billion a year. This isn’t a privacy nerd talking point anymore — it’s a financial crisis hiding in plain sight.

We’ve been watching this industry for a while. So has Congress. And according to a new investigation covered by CalMatters, the findings are ugly. Data brokers — those shadowy companies most people have never heard of — are harvesting your name, address, health history, income, and buying habits, then packaging and selling that information to anyone with a credit card and a motive. The damage doesn’t stop at your inbox getting spammed. It bleeds into insurance premiums, targeted scams, and identity theft that can take years to untangle.

Who Are These People, Exactly?

Data brokers aren’t startups trying to change the world. They’re information middlemen. They sit between the apps you use, the stores you shop at, and the advertisers, employers, landlords, and fraudsters who want to know everything about you. Companies like Acxiom, LexisNexis, and hundreds of smaller players operate with almost zero federal oversight. They don’t need your permission. They don’t need to tell you what they have. They just need a buyer.

The business model is simple and ruthless. Collect everything. Aggregate it. Sell it. Repeat. Some of these companies hold profiles on hundreds of millions of Americans — profiles that include deeply sensitive categories like mental health treatment, pregnancy status, and political affiliation. There’s no opt-in. There’s barely any opt-out.

The $21 Billion Wound

Twenty-one billion dollars. That’s not what data brokers are making. That’s what Americans are losing because of what data brokers do. Fraud enabled by exposed personal data. Scams that work because the scammer already knows your name, your bank, your neighborhood. Higher costs passed down from companies that use your data profile to price-discriminate against you. The harm is distributed and diffuse, which is exactly why it’s been so easy to ignore.

Congress is finally paying attention. Committees have been grilling industry representatives. Proposals for a federal data privacy law are circulating again — though they’ve been circulating for years, and the lobbying dollars pushing back are substantial. The data broker industry spent heavily to keep Washington disinterested, and it worked for a long time.

The Tech Money Is Still Flowing

Here’s the thing that makes this story even more uncomfortable: the broader tech industry isn’t slowing down. Investors are still writing enormous checks. Just look at this week’s biggest funding rounds — medical devices, AI gadgets, frontier labs all pulling in massive capital. Some of that money flows directly into data infrastructure. The same ecosystem that funds your favorite apps is funding the pipes that carry your personal information to strangers.

And the appetite for data isn’t shrinking. AI models need training data. Advertisers need targeting signals. Political campaigns need voter profiles. Every new product category creates new demand for personal information, and data brokers are happy to supply it.

The Hot Take

Data brokers should be treated like utilities — regulated, audited, and required to pay into a victim compensation fund. Not because regulation fixes everything, but because right now the entire burden of protecting your own data falls on you. You’re supposed to manually opt out of hundreds of individual broker databases, navigate byzantine privacy request processes, and monitor your credit for the fallout. That’s insane. The companies profiting from your information should bear the cost of protecting it. Full stop. If that kills the business model, good. Some business models deserve to die.

The AI Angle Nobody Wants to Talk About

There’s a bigger fight forming on the edges of this one. Even the Pope’s first major battle isn’t over theology — it’s over AI, which tells you something about how fast these questions are moving into the mainstream. As AI systems get better at synthesizing fragmented data points into detailed behavioral profiles, the data broker problem gets exponentially worse. Right now a broker might sell a list. Tomorrow they’re selling a simulation of you — your likely decisions, your emotional triggers, your price sensitivity. That’s not science fiction. That infrastructure is being built right now.

Meanwhile, the entertainment industry keeps building new walls around your attention. The streaming wars are heating up with one Netflix rival pulling ahead — and every one of those platforms is also a data collection machine with a very good legal team.

The data broker industry survives because most people don’t feel the harm directly. It’s slow. It’s distributed. It shows up as a slightly higher insurance quote, a scam call that knew too much, a credit hit you can’t explain. But $21 billion in annual damage is not abstract. It’s real money leaving real people’s lives. Congress knows it. We’ve known it. The only question left is whether the political will to actually do something about it outlasts the industry’s next lobbying cycle.

Watch the Breakdown