The New Oil

The New Oil logo
Why Privacy & Security Matter

Why Privacy & Security Matter

There is a popular phrase these days: “data is the new oil.” The phrase compares the Texas Oil Boom of the early 1900s, which saw Texas - and the US as a whole - become rapidly wealthy and industrialized. Some people found their lives changed forever when they struck oil, becoming massively wealthy almost overnight regardless of their previous background.

In 2020, the digital advertising market was valued at $547 billion, and is expected to grow to $819 billion by 2026 (Source). Some estimates already place it as being a trillion-dollar industry (Source). For context, the technology industry alone is valued at just over $19 trillion (Source). Much like oil, this enabled a sudden explosion of wealth and breakneck transformation of the internet was largely built on violating the privacy of the users, often without adequate consent or transparency. Any college dropout can build a multi-million (or billion) dollar company with a good idea and enough user data to leverage for advertising dollars (or government contracts).

Most of us are not strangers to the concept of targeted advertising. Most of us don’t particularly care, either. After all, who wouldn’t want relevant ads for products and services that might actually appeal to you or improve your life? However, most of us don’t understand the invasive measures these companies go to to collect this data, or the devastating unforseen effects it can have on people.

It may sound paranoid, but it’s proven from credible sources that entire companies exist simply to collect your data and build profiles on you, and in their minds the ends will always justify the means. Often they collect data in ways that range from questionable to blatantly illegal, collecting information that almost no one would knowingly consent to. This massive trove of data is regularly abused. In just the past few years, the Egyptian government has tracked opponents and activists through phone apps, the Moroccan government has spied on the phones of human rights defenders, the Chinese government has hacked Asian telecommunications companies to spy on the Uighur (a minority Muslim ethnic group living in China), and TikTok has been used to spy on journalists. These are just a few examples.

It sounds like something from a dystopian sci-fi movie, but just a few of the known methods of data collection include using high-pitched tones that only electronic devices can hear to report how many people are watching a TV show, collecting banking and shopping information, tracking your car as you drive through the real world, tracking your phone’s physical location as you browse the store to see where you spend the most time, collecting your DNA from family heritage testing services, the Department of Motor Vehicles selling your driver’s license information, and more.

“Wow,” you may say, “that’s intense. But I’m not an activist or famous. Why should I care? I have nothing to hide.”

Why Care About Privacy

  • One woman in 1989 was murdered by her stalker who found her address from DMV public records. In 2020, a Los Angeles man was killed in a robbery gone wrong after posting his address to Instagram. (Source, Source, Source)
  • Lack of privacy leads to a population who is afraid to educate themselves on important issues lest they be mistaken for troublemakers. (Source)
  • In 2017, the FBI chose to drop charges against a pedophile rather than reveal how they caught him; most likely to avoid having their backdoor fixed, to avoid having other countries use it against us, or identify that we used it against them. This demonstrates that despite their constant calls to ban encryption in the name of “stopping child sexual abuse,” this not always their true motive. (Source)
  • Multiple industries are now keeping “surveillance scores” on people, which can be used to determine employability, overall consumer trustworthiness, insurance rates, and even whether you’re a good person to rent to. Some western countries are even working on implementing a China-style social credit system fed by your online and collected data. (Source, Source)
  • Many companies have been known to sell your data to or work exclusively with law enforcement agencies without your consent. In 2011, GPS data was sold to local police in the Netherlands so they could issue traffic tickets. In the US, Ring Doorbells are a common surveillance tool for police around the country. In another case, the US military purchased location data from popular apps that track weather, exercise, and even Muslim prayer to help targeted drone strikes. (Source, Source, Source)
  • Financial institutions have been known to penalize you financially because they don’t like your shopping habits. In one case, American Express lowered a person’s credit limit because they shopped at “deadbeat” establishments like Walmart. (Source)
  • In Australia, data breaches from rogue employees were up 52% between 2019 and 2020. Insider threats like these have been used in everything from general identity theft to harassing people who left negative reviews. (Source, Source)
  • Sextortion scams cost $8 million USD in the first half of 2021. (Source)
  • AI-generated nudes are now easily available for anyone, even everyday normal people, based on something as little as a social media profile picture. (Source)
  • Modern vehicles are abusing their internet connectivity to collect data about your driving habits and sell that data to brokers, who then use it to calculate your insurance rates and eligibility (sometimes incorrectly). (Source)
  • Many companies abuse data such as location or browsing history to adjust the price you pay for their goods and services. (Source, source).

Why Care About Security

  • Weak passwords can be hacked within seconds. Software to perform this is legally available for free all over the internet. (Source)
  • Companies all over the world - big and small alike - are constantly suffering from data breaches that can reveal anything from username and password to account numbers, government identifications, and more. (Source)
  • According to the Bureau of Justice statistics, “Approximately 68% of the victims of cyber theft sustained monetary loss of $10,000 or more.” Often cyber crime isn’t just about draining a person’s bank account, but also opening new accounts in that person’s name, which that person is then liable to prove is illegitimate. (Source)
  • Internet of Things (aka smart devices) attacks were up 600% in 2017. It grew again in 2021, doubling in six months to reach a total 1.5 billion attacks. (Source, Source)
  • The number of new mobile malware targeting mobile devices increased by 54% in 2017. (Source)
  • Failure to properly control access to your devices or accounts can result in information being uncovered by unwanted parties even if they have little or no technical ability. Consider the story of the woman who used her sleeping husband’s fingerprint to unlock his phone and discovered he was cheating on her, causing such a scene that the plane had to make an emergency landing. (Source)
  • Researchers in 2015 were able to successfully hijack a Jeep while it was in use on the freeway, controlling the HVAC, radio, windshield wipers and fluid, the digital display, the brakes, the steering, and the transmission. The hackers were ten miles away. (Source)
  • 2020 saw an average of 7 million records per day being exposed in data breaches. (Source)
  • Australia alone suffered 1,050 data breaches in the 2019-2020 financial year, a 12-month period. That’s almost 3 data breaches per day in a single country with a population of only 25 million. (Source)
  • For parents, child identity theft is on the rise, affecting over 1 million children in 2017 alone. (Source)
  • In Australia, 91% of reported data breaches leaked sensitive information to criminals such as home address, phone number, and email address. (Source)
  • Rogue employees are on the rise, meaning that those people now have your information to stalk, harass, or otherwise disrupt your life. (Source, Source)
  • 2020 was a “record-breaking” year in US school hacks. (Source)
  • 2023 was a record-breaking year for ransomware at $1.1 billion dollars, which will likely incentivize cybercriminals to keep trying. (Source)