A former U.S. government contractor purchased commercial location data tracking mobile phones across dozens of countries and is now publicly detailing how he did it, exposing a largely unregulated market that privacy advocates say poses direct national security risks.

Mike Yeagley, who previously worked with federal agencies on data analysis, told 404 Media that he acquired the data through commercial brokers — the same channels available to advertisers, hedge funds, and private investigators.

The data, he said, is granular enough to identify individuals visiting military installations, foreign embassies, and intelligence facilities.

Yeagley said his goal in going public was to demonstrate that no technical barrier prevents hostile actors from buying equivalent datasets. “The market is open,” he told the outlet in a Monday interview. “Anyone can do this.”

Data brokers collect location signals primarily through software development kits embedded in consumer apps. Users rarely know their coordinates are being sold onward.

The Federal Trade Commission has taken enforcement action against individual brokers in recent years but has not imposed sector-wide restrictions. Congress has not passed a federal privacy law governing location data sales.

Senate Commerce Committee hearings on data broker regulation are scheduled to resume this autumn, with a floor vote on the American Privacy Rights Act still unscheduled as of Monday.