Deadly cartels know where our border agents live. We have to protect their families
DOJ Audit Reveals Gaps in Protecting Agents After Cartel Hacker Targeted FBI Attaché
A June 2025 report from the Justice Department’s Inspector General (IG) uncovered a series of weaknesses in how federal law‑enforcement agencies shield their personnel from “ubiquitous technical surveillance” (UTS). The audit came after a hacker affiliated with Mexico’s Sinaloa cartel used a U.S. FBI assistant legal attaché’s phone number to track the official’s movements in Mexico City, identify the people he met, and reportedly intimidate or kill potential witnesses and sources.
How a hacker traced an American official
According to the IG’s findings, the hacker obtained the attaché’s phone number and used it to download call logs and location data. With that information in hand, he overlaid the data onto Mexico City’s publicly available traffic‑camera network, effectively creating a live trail of the attaché’s daily routines. By matching camera footage with the attaché’s movements, the hacker was able to pinpoint the identities of individuals he met, such as local informants and other officials.
The cartel reportedly used the gathered intelligence to threaten potential witnesses and, in some instances, to carry out killings. The incident illustrates how modern adversaries can leverage commercially available data to replace traditional, on‑ground surveillance.
DOJ’s assessment of UTS threats
The IG report notes that the Department of Justice “continued to be affected by UTS,” yet the agency has not developed a common definition or coordinated strategy to counter the threat. The audit further found that few DOJ components had taken steps to mitigate UTS, and that training specific to the issue was largely absent.
In an updated audit released last week, the IG reiterated that the identified deficiencies “place the Department and its employees, investigations, operations, sources, and witnesses at increased risk to UTS threats.” The report urges that every law‑enforcement and homeland‑security official recognize the risks posed by inexpensive, commercially available data that can reveal personal and family information with minimal cost.
Wider implications for homeland‑security personnel
The cartels’ use of the attaché’s data is part of a larger pattern. In October 2025, the Department of Homeland Security (DHS) reported that cartels had placed bounties on ICE and Customs and Border Protection officers in Chicago, ranging from $2,000 for doxxing or gathering intelligence to $50,000 for the assassination of senior officials. These bounties underscore the real threat that data‑driven surveillance poses to federal agents, especially those working on cartel investigations.
The audit’s findings also highlight how a single data point—such as a phone number—can expose a chain of personal information. A family member’s address, a school the children attend, a church congregation, or a local youth‑sports team can all be inferred from the aggregate data that an adversary can harvest. When combined, these details create a portrait of a person’s daily life that can be exploited for intimidation or violence.
The commercial data economy
Researchers cited in the report have shown that commercial data brokers can supply sensitive personal information on U.S. military personnel and other federal employees for as little as a few cents. A WIRED investigation revealed that commercial location data could link devices associated with U.S. military sites overseas to the homes and schools of military families.
These developments underscore that the “data economy” has evolved into a powerful tool for adversaries, capable of revealing intimate details about individuals and their families without direct contact.
Recommendations for protection
The IG report calls for a comprehensive protection program for federal agents that includes:
- Assessment of Existing Exposure – Agencies should systematically evaluate what personal data is already public or accessible through data brokers.
- Removal of Public Data – Where possible, agents’ addresses and other sensitive details should be pulled from broker sites.
- Family‑Centric Security Measures – Support should be provided to families in securing personal accounts and minimizing their digital footprint.
- Clear Reporting Channels – A straightforward process must exist for agents and their families to report threats involving personal information.
- Targeted Training – Officers should be trained to anticipate that their lives are visible and to act accordingly.
The report also stresses the need for a senior official to lead these efforts, with clear authority, sustained funding, and accountability mechanisms.
A call to action
The Mexico City case is a stark reminder that technology can render physical surveillance obsolete for organized crime groups. Federal agencies, particularly those tasked with cartel investigations, must move beyond reactive measures and adopt proactive strategies to safeguard their personnel and the witnesses they rely on.
Congress is urged to grant the Department of Justice the authority and resources to implement a robust UTS protection framework, ensuring that agents and their families can operate without the looming threat of being tracked, threatened, or harmed. The audit’s findings should serve as a wake‑up call: if the data economy can be weaponized so easily, the Department must act now to plug these leaks and protect its workforce.