Executive & family privacy briefings

Executives face a threat model that sits outside the scope of most corporate security programmes: personal targeting, enabled by open-source data that any adversary can access without authentication. The briefings in this collection address that model directly.

The records that create the exposure are held by data brokers, people-search platforms, company registries, and breach corpora. They include home addresses, family member names, personal phone numbers, and credential fragments — assembled from public sources without the subject's knowledge or consent, and queryable by anyone prepared to spend an afternoon on it. When those records reach a threat actor targeting a senior figure, they enable physical surveillance, social engineering, credential-based account compromise, and doxing campaigns.

These briefings cover the four executive threat types and how each operates, the country-specific removal mechanics for the broker systems that create the exposure, the infostealer economy that circulates personal credentials, and the protective disciplines — OPSEC hardening, broker erasure, active monitoring — that reduce the surface. The research is primary-source and practitioner-level; it assumes a reader who wants to understand the mechanism, not a summary of industry guidance.