French spy identities and sensitive personnel revealed by advertising data brokers through geolocation leaks

Intelligence & EspionageSignals/Technical Intelligence (SIGINT/TECHINT)Electronic surveillance

AggressorDefense

Summary

Advertising data brokers leaked geolocation data revealing residences and movements of French intelligence and defense personnel near sensitive sites in 2024, posing major security risks.

In a joint investigation by Le Monde and European media partners, a large database of advertising geolocation data was exposed, containing over 16 million identifiers and nearly a billion location points, some dating back several years. This data included smartphones belonging to France's most sensitive state personnel, such as intelligence officers (DGSE), counterintelligence (DRSD), internal security (DGSI), elite police units (GIGN), and defense industrial sector employees from firms like Naval Group, Thales, and KNDS. The data revealed precise locations of secret military facilities like the Île Longue nuclear submarine base and Saint-Dizier airbase, as well as movements of presidential protection officers around the Élysée and private residences. Officials from the intelligence and defense sectors acknowledged the threat posed by such data availability and described internal training, strict hygiene protocols, and operational security measures like 'bubbles of clandestinity' to mitigate risks. However, the ease with which hostile intelligence or criminal groups could acquire and exploit these data remains a critical concern for French national security. The investigation highlighted that many personnel unknowingly exposed their data through ubiquitous smartphone advertising practices, which are difficult to avoid. The Élysée Palace declined to comment on the findings.

Classification

Confidence: High

Classified as aggressor because the event describes hostile exploitation of advertising geolocation data by possible hostile intelligence or criminal actors exposing French state secrets. Classified as defense preparation because French intelligence and defense agencies acknowledged the vulnerability and have implemented internal security protocols and awareness campaigns to mitigate risks.

Source URL

https://archive.ph/191fz

Open source

Provenance

Publisher: hwt_web_submit
Submitted: Feb 14, 2026, 12:22 UTC
Last updated: Nov 4, 2026, 08:35 UTC
Event time: Oct 1, 2024, 00:00 UTC

Published as a Defense Preparations signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.

Raw record

{
  "id": "52cb7bf2-c60b-4623-a136-ff0de57db82a",
  "url": "https://archive.ph/191fz",
  "source": "hwt_web_submit",
  "status": "approved",
  "category": "Intelligence & Espionage",
  "subcategory": "Signals/Technical Intelligence (SIGINT/TECHINT)",
  "incident_type": "Electronic surveillance",
  "country": "France",
  "source_reliability": "B",
  "info_credibility": "3",
  "tags": [
    "advertising data brokers",
    "geolocation leakage",
    "French intelligence exposed",
    "DGSE",
    "GIGN",
    "critical military infrastructure",
    "nuclear base",
    "presidential security",
    "digital hygiene",
    "data privacy",
    "hybrid warfare",
    "intelligence compromise",
    "signals intelligence",
    "data broker security risk",
    "defense industry",
    "Thales",
    "Naval Group",
    "KNDS",
    "ANSSI"
  ],
  "nodes": [
    "Node 2: 5th Column"
  ],
  "countries": [],
  "where_text": "Cyberspace",
  "headline": "French spy identities and sensitive personnel revealed by advertising data brokers through geolocation leaks",
  "description": "An international investigation revealed that advertising data brokers harvested and sold geolocation data from smartphones—including those of French intelligence officers, elite police, military personnel, and critical infrastructure workers—exposing their residences, habits, and movements. The dataset included over 16 million advertising identifiers and nearly a billion location points, with entries dating from 2021 to 2024. Key sensitive sites such as the Île Longue nuclear submarine base, Saint-Dizier Rafale airbase, several direction générale de l'armement sites, and elite police units including GIGN and Presidential protection officers were identifiable through these data. Phones linked to personnel at the Élysée Palace and other top government buildings were tracked. The leak endangers national security by potentially exposing agents' identities and operational security to hostile intelligence services or organized crime. Official French agencies and defense companies acknowledged the risk and confirmed internal awareness and protective measures, including strict phone usage rules and cybersecurity hygiene, but the pervasive advertising data collection poses ongoing challenges. The investigation was conducted by Le Monde in partnership with multiple European media outlets.",
  "summary_short": "Advertising data brokers leaked geolocation data revealing residences and movements of French intelligence and defense personnel near sensitive sites in 2024, posing major security risks.",
  "summary_extended": "In a joint investigation by Le Monde and European media partners, a large database of advertising geolocation data was exposed, containing over 16 million identifiers and nearly a billion location points, some dating back several years. This data included smartphones belonging to France's most sensitive state personnel, such as intelligence officers (DGSE), counterintelligence (DRSD), internal security (DGSI), elite police units (GIGN), and defense industrial sector employees from firms like Naval Group, Thales, and KNDS. The data revealed precise locations of secret military facilities like the Île Longue nuclear submarine base and Saint-Dizier airbase, as well as movements of presidential protection officers around the Élysée and private residences. Officials from the intelligence and defense sectors acknowledged the threat posed by such data availability and described internal training, strict hygiene protocols, and operational security measures like 'bubbles of clandestinity' to mitigate risks. However, the ease with which hostile intelligence or criminal groups could acquire and exploit these data remains a critical concern for French national security. The investigation highlighted that many personnel unknowingly exposed their data through ubiquitous smartphone advertising practices, which are difficult to avoid. The Élysée Palace declined to comment on the findings.",
  "actor_primary": "DGSE",
  "target_primary": null,
  "location_text": "Primarily French military and state security sites including Île Longue nuclear base (Finistère), Saint-Dizier airbase (Haute-Marne), Élysée Palace and Paris-area intelligence/gendarmerie locations",
  "location_region": null,
  "location_coordinates_lat": null,
  "location_coordinates_lon": null,
  "location_precision": "Regional",
  "is_aggressor_signal": true,
  "signal_type": "DEFENSE_PREP_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "Classified as aggressor because the event describes hostile exploitation of advertising geolocation data by possible hostile intelligence or criminal actors exposing French state secrets. Classified as defense preparation because French intelligence and defense agencies acknowledged the vulnerability and have implemented internal security protocols and awareness campaigns to mitigate risks.",
  "event_time_utc": "2024-10-01T00:00:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "pm24h",
  "created_at": "2026-02-14T12:22:51.400Z",
  "updated_at": "2026-11-04T08:35:32.139Z",
  "reliability_band": "strong",
  "location_precision_band": "regional",
  "time_precision_band": "within_24h",
  "severity_band": "significant",
  "attribution_confidence_band": "high",
  "attribution_basis": "independent_sources"
}

Public assessmentReliability: StrongSeverity: SignificantAttribution: HighIndependence confirmedTime: Same dayLocation: Regional

Source reliability

Info credibility

Event time

Oct 1, 2024, 00:00 UTC

Event time confidence

pm24h

Location

Primarily French military and state security sites including Île Longue nuclear base (Finistère), Saint-Dizier airbase (Haute-Marne), Élysée Palace and Paris-area intelligence/gendarmerie locations

Primary actor

DGSE

Country

France

Tags

advertising data brokers, geolocation leakage, French intelligence exposed, DGSE, GIGN, critical military infrastructure, nuclear base, presidential security, digital hygiene, data privacy, hybrid warfare, intelligence compromise, signals intelligence, data broker security risk, defense industry, Thales, Naval Group, KNDS, ANSSI

Nodes

Node 2: 5th Column

Loading signal...

{ "id": "52cb7bf2-c60b-4623-a136-ff0de57db82a", "url": "https://archive.ph/191fz", "source": "hwt_web_submit", "status": "approved", "category": "Intelligence & Espionage", "subcategory": "Signals/Technical Intelligence (SIGINT/TECHINT)", "incident_type": "Electronic surveillance", "country": "France", "source_reliability": "B", "info_credibility": "3", "tags": [ "advertising data brokers", "geolocation leakage", "French intelligence exposed", "DGSE", "GIGN", "critical military infrastructure", "nuclear base", "presidential security", "digital hygiene", "data privacy", "hybrid warfare", "intelligence compromise", "signals intelligence", "data broker security risk", "defense industry", "Thales", "Naval Group", "KNDS", "ANSSI" ], "nodes": [ "Node 2: 5th Column" ], "countries": [], "where_text": "Cyberspace", "headline": "French spy identities and sensitive personnel revealed by advertising data brokers through geolocation leaks", "description": "An international investigation revealed that advertising data brokers harvested and sold geolocation data from smartphones—including those of French intelligence officers, elite police, military personnel, and critical infrastructure workers—exposing their residences, habits, and movements. The dataset included over 16 million advertising identifiers and nearly a billion location points, with entries dating from 2021 to 2024. Key sensitive sites such as the Île Longue nuclear submarine base, Saint-Dizier Rafale airbase, several direction générale de l'armement sites, and elite police units including GIGN and Presidential protection officers were identifiable through these data. Phones linked to personnel at the Élysée Palace and other top government buildings were tracked. The leak endangers national security by potentially exposing agents' identities and operational security to hostile intelligence services or organized crime. Official French agencies and defense companies acknowledged the risk and confirmed internal awareness and protective measures, including strict phone usage rules and cybersecurity hygiene, but the pervasive advertising data collection poses ongoing challenges. The investigation was conducted by Le Monde in partnership with multiple European media outlets.", "summary_short": "Advertising data brokers leaked geolocation data revealing residences and movements of French intelligence and defense personnel near sensitive sites in 2024, posing major security risks.", "summary_extended": "In a joint investigation by Le Monde and European media partners, a large database of advertising geolocation data was exposed, containing over 16 million identifiers and nearly a billion location points, some dating back several years. This data included smartphones belonging to France's most sensitive state personnel, such as intelligence officers (DGSE), counterintelligence (DRSD), internal security (DGSI), elite police units (GIGN), and defense industrial sector employees from firms like Naval Group, Thales, and KNDS. The data revealed precise locations of secret military facilities like the Île Longue nuclear submarine base and Saint-Dizier airbase, as well as movements of presidential protection officers around the Élysée and private residences. Officials from the intelligence and defense sectors acknowledged the threat posed by such data availability and described internal training, strict hygiene protocols, and operational security measures like 'bubbles of clandestinity' to mitigate risks. However, the ease with which hostile intelligence or criminal groups could acquire and exploit these data remains a critical concern for French national security. The investigation highlighted that many personnel unknowingly exposed their data through ubiquitous smartphone advertising practices, which are difficult to avoid. The Élysée Palace declined to comment on the findings.", "actor_primary": "DGSE", "target_primary": null, "location_text": "Primarily French military and state security sites including Île Longue nuclear base (Finistère), Saint-Dizier airbase (Haute-Marne), Élysée Palace and Paris-area intelligence/gendarmerie locations", "location_region": null, "location_coordinates_lat": null, "location_coordinates_lon": null, "location_precision": "Regional", "is_aggressor_signal": true, "signal_type": "DEFENSE_PREP_SIGNAL", "is_hybrid_war_signal": true, "classification_complete": true, "hybrid_signal_complete": true, "classification_confidence": "High", "classification_rationale": "Classified as aggressor because the event describes hostile exploitation of advertising geolocation data by possible hostile intelligence or criminal actors exposing French state secrets. Classified as defense preparation because French intelligence and defense agencies acknowledged the vulnerability and have implemented internal security protocols and awareness campaigns to mitigate risks.", "event_time_utc": "2024-10-01T00:00:00.000Z", "end_time_utc": null, "event_time_confidence": "pm24h", "created_at": "2026-02-14T12:22:51.400Z", "updated_at": "2026-11-04T08:35:32.139Z", "reliability_band": "strong", "location_precision_band": "regional", "time_precision_band": "within_24h", "severity_band": "significant", "attribution_confidence_band": "high", "attribution_basis": "independent_sources" }