Counterintelligence & Tradecraft — 2026-05-29

IRGC Threatens US Troops and Families While CENTCOM Confirms Adversary Exploitation of Commercial Location Data

BLUFCommercial location data has crossed from a surveillance vulnerability to a physical force-protection threat against US personnel and dependents, yet a DOD-wide advertising identifier fix remains unlikely before year's end.

CENTCOM confirmed to Congress in April that it received "multiple threat reports concerning adversary exploitation of commercial location data to target or surveil U.S. personnel in theater" for Operation Epic Fury, made public May 28 by Sen. Ron Wyden and Rep. Pat Harrigan 123. Sarah Streyder of the Secure Families Initiative told Military Times that threats appearing to originate from IRGC-connected individuals have targeted service members and families across at least three branches via email, text, and social media, with threats including home addresses and children's school locations 1. IRGC-connected individuals have also appeared in person at Gulf-region hotels inquiring about temporarily-stationed U.S. personnel, forcing repeated relocations 1. A bipartisan group of 14 lawmakers wrote Pentagon CIO Kirsten Davies on May 28 urging advertising ID disablement on government devices, noting CENTCOM confirmed the IDs remain active on DOD-issued smartphones and that location-sharing controls were only deployed this month 23.

Analysis
In-person IRGC-connected hotel inquiries targeting temporarily-stationed US personnel, corroborated by CENTCOM's April congressional disclosure and independent Military Times field reporting, confirm that commercially purchased location data now drives physical force-protection operations against US personnel and their dependents, not merely remote surveillance. Advertising identifiers remain active on DOD-issued smartphones. Deploying only location-sharing controls this month, without addressing the ad ID vector, follows a documented DOD pattern of structural deferrals on a threat class flagged internally as early as 2016. A department-wide directive disabling advertising IDs is unlikely before December 31, 2026. That assessment carries moderate confidence: awareness has consistently preceded structural action by nearly a decade. The hotel inquiry pattern and family-targeting campaign may instead reflect opportunistic actors exploiting open-market data rather than a coordinated IRGC program, but either reading leaves theater personnel exposed while DISA tests remediation. Congressional pressure for mandatory legislation intensifies if DOD defers again.

4 sources

Scary and silencing: Troops, families receive threats from foreign bad actors - Military Times
Data brokers are helping enemies target US troops. The Pentagon must step up, lawmakers say - Defense One
Military says adversaries use commercial data to target troops - Washington Examiner
Exclusive-Pentagon Says US Military Personnel Are Reportedly Being Targeted Using Location Data - Reuters