Data brokers: the leak you pay for
Who collects your data, how, why it's structurally hard to stop, and what you can reasonably do.
01 / 06
If your data is already public, security changes nature. Before protecting, understand what has already leaked.
Most cybersecurity discourse starts with “protect your data”. It assumes an initial state of confidentiality that has not existed for a long time. Your data — emails, phone numbers, birth dates, professional history, photos, contacts, hashed passwords, sometimes in cleartext — already circulates in databases you have never seen.
This axis lays the mental framework that makes the rest of the site coherent. Before hardening a phone or choosing a VPN, you must understand that the question is not “how do I prevent the leak?” but “how do I operate in an assumed-leaked state?”. This shift changes everything: compartmentation becomes a priority, rotation becomes a discipline, resilience takes precedence over prevention.
The articles in this axis should be read in order. The first one (Your data is already public) is Shield’s manifesto article.
Who collects your data, how, why it's structurally hard to stop, and what you can reasonably do.
Building watertight identities by use. The four-identity model, tools per compartment, the non-contamination rule, and rotation as maintenance.
An honest anatomy of the GDPR right to erasure — what it covers, what it doesn't, and the pragmatic alternatives when deletion is out of reach.
Step-by-step method to inventory what is already public about you. Free tools, priority order, decisions to make.
The privacy-first fiction serves everyone except you. An honest inventory of what has already leaked, and the strategic shift to operating in an assumed-leaked state.