Here's our 2023 report on how "data about American defense personnel and political leaders flows to foreign states and non-state actors":
https://www.iccl.ie/digital-data/americas-hidden-security-crisis/
In a letter, Wyden and other congress members write that the DoD "has not taken basic steps to protect U.S. military personnel from the serious … threat posed by the collection and sale of personal information". Instead, it has "encouraged the growth of this industry by buying location data" from data brokers:
https://www.documentcloud.org/documents/28168364-ron-wydens-may-28-2026-letter-to-the-department-of-defense/