Adversary Intelligence — 2026-06-14

CENTCOM Counterintelligence Reports Iran Exploited Commercial Location Data to Track US Personnel in Theater

BLUFFormal DoD policy mandating advertising identifier restrictions on operational devices is unlikely by year-end 2026, leaving commercially available location data as a persistent targeting vector against deployed forces.

In a May 28 letter to the Pentagon, Sen. Ron Wyden and Rep. Pat Harrigan, joined by bipartisan co-signers, disclosed that CENTCOM reported receiving "multiple threat reports concerning adversary exploitation of commercial location data to target or surveil U.S. personnel in theater" during Operation Epic Fury 123. The disclosure referenced an April 14 CENTCOM communication, and lawmakers called it the first official confirmation of U.S. forces being targeted in an active war zone using commercially purchased location data 13. CENTCOM told Congress that advertising identifiers on government-issued smartphones remained enabled as of April while DISA tested a disable capability, and that the command had administratively restricted location sharing on deployed devices in May 12. The Pentagon had not responded to the lawmakers' letter as of June 12 2.

Analysis
Iran's exploitation of commercial location data against US forces in Operation Epic Fury is the first confirmed instance of adtech weaponized against deployed personnel in an active theater. The congressional letter's disclosure that advertising identifiers remained enabled on government-issued smartphones weeks into the campaign, with DISA's disable capability still untested, reveals a policy-execution failure no administrative workaround fixes at scale. With no independent corroboration beyond Reuters' direct access to that letter, low analytic confidence attaches to the underlying threat reports. Iranian exploitation may have remained at pattern-of-life collection rather than enabling strikes. Formal DoD policy mandating identifier restrictions on operational devices is unlikely by year-end 2026, given Pentagon non-response and DISA's incomplete testing cycle. If that holds, the venue for remedy shifts from Pentagon discretion to Congress.

3 sources

Exclusive: Pentagon Says US Military Personnel Are Reportedly Being Targeted Using Location Data - Reuters
Experts: Adversaries Can Exploit App Data to Track Troops, Families - Air and Space Forces Magazine
US troops are reportedly being targeted using location data, Pentagon says - Army Times