Daily Surveillance Briefing: March 5, 2026

TL;DR:

NPR investigation drops. ICE is using surveillance tools to track, apprehend, and intimidate immigrants and American citizens who criticize its policies. Facial recognition apps, license plate readers, social media monitoring, Global Entry revocations for critics.
PenLink deadline TODAY. DHS must brief Congress on warrantless phone tracking. ICE cancelled its last scheduled briefing without explanation.
OpenAI signs Pentagon deal. Sam Altman sealed the contract that Anthropic rejected. Includes explicit ban on domestic surveillance of Americans, but critics say it's not enough.
LexisNexis breach confirmed. Hackers stole 2GB including 400K cloud user profiles, 118 .gov emails from federal judges and DOJ attorneys. Company says it's "contained."
Defense contractors flee Anthropic. Pentagon's "supply chain risk" designation is working. Companies building military AI are cutting ties with Claude.
FISA 702: 46 days until sunset.

NPR: ICE Built a Surveillance Web Targeting Americans

NPR published a damning investigation yesterday documenting how ICE has woven a "broad web of surveillance tools" to monitor not just immigrants, but American citizens who criticize the agency [1].

The report is built on dozens of accounts from people who've had direct confrontations with federal immigration officers. The patterns are consistent and disturbing:

Facial recognition apps. Immigration lawyers told NPR their clients were subjected to real-time facial recognition during encounters. One ICE agent testified under oath about using an app showing "likely home addresses" of deportation targets.
License plate surveillance. ICE spent $5 million on Thomson Reuters for "license plate reader data to enhance investigations for potential arrest, seizure and forfeiture."
Social media retaliation. Two Instagram users with hundreds of thousands of followers reported their Global Entry status was revoked after posting content critical of ICE.
Administrative subpoenas. DHS is using these to unmask anonymous social media accounts. The subpoenas don't require a judge or grand jury. Civil rights experts say they're being weaponized against free speech.

Activists and journalists told NPR that agents photographed their faces and license plates, called them by name, or led them directly to their homes. The surveillance extends to anyone who shows up at protests or criticizes the agency online.

The investigation also details data-sharing agreements that have drawn legal scrutiny. A deal with HHS gives ICE names, dates of birth, and addresses of immigrants in Medicaid data. A federal judge already found the IRS violated federal tax law by disclosing address information to ICE for over 42,000 individuals [2].

The bigger picture: This is what we've been covering piece by piece: the PenLink contracts, the facial recognition tools, the data broker purchases. NPR connected the dots into a single picture. ICE built a surveillance apparatus that reaches into every aspect of American life.

Sources: [1] NPR, [2] WLRN

PenLink Deadline: Will DHS Respond?

Today is March 5th. That's the deadline Congress gave DHS to explain ICE's warrantless phone surveillance capabilities [3].

Quick recap: Rep. Shontel Brown's February 19 letter demanded a briefing on PenLink, the tools ICE uses to track cell phones across entire neighborhoods without warrants. The technology can reveal where you live, work, worship, and seek medical care.

The track record isn't promising. ICE scheduled a briefing for February 10th, then cancelled it one day before with no explanation and no offer to reschedule [4].

If DHS stays silent today, the 70+ lawmakers who requested an Inspector General probe into ICE's "illegal" location data purchases will have more ammunition to escalate.

What they want to know:

Legal justification for mass location tracking without warrants
Data storage and disposal procedures
Access controls to prevent misuse
Communications regarding PenLink acquisition

ICE's total PenLink contracts exceed $25 million. The agency spent $2.3 million on Webloc (phone tracking) and Tangles (social media scraping) alone [5].

Sources: [3] Rep. Brown, [4] FedScoop, [5] Biometric Update

OpenAI Signs Pentagon Deal, Adds Surveillance Limits

Sam Altman finalized what Anthropic walked away from [6].

OpenAI announced a reworked agreement with the Pentagon on Monday. The contract explicitly states: "The AI system shall not be intentionally used for domestic surveillance of U.S. persons and nationals."

That sounds good. Here's why critics aren't satisfied:

"Intentionally" doing a lot of work. Unintentional surveillance? Mass data collection that happens to sweep up Americans? The language has holes.
Foreign surveillance still on the table. The ban is domestic. The Pentagon can use OpenAI for surveillance abroad.
Altman admits it was rushed. In internal communications, he called the deal "opportunistic and sloppy" [7]. He later defended it as necessary to "de-escalate" tensions with the military.

The deal came hours after President Trump designated Anthropic a "supply chain risk to national security" for refusing to let the military use Claude for "any lawful purpose," including surveillance and autonomous weapons.

Anthropic CEO Dario Amodei said the company "cannot in good conscience" allow its models under those conditions. OpenAI took the contract instead.

Sources: [6] NBC News, [7] Fortune

LexisNexis Breach: Federal Judges and DOJ Data Stolen

LexisNexis Legal & Professional confirmed a data breach after hackers leaked files stolen from its systems [8].

A threat actor calling themselves "FulcrumSec" claimed responsibility. They say they exploited an unpatched React vulnerability on February 24th, then exfiltrated data from the company's AWS infrastructure for days [9].

What was stolen:

~400,000 cloud user profiles (names, emails, phone numbers, job roles)
21,042 enterprise customer accounts
118 .gov emails from federal judges, DOJ attorneys, court clerks, and SEC staff
3.9 million database records from 536 Redshift tables
53 plaintext AWS Secrets Manager credentials
45 employee password hashes

LexisNexis says the intrusion has been "contained" and found "no evidence" that products or services were impacted. But FulcrumSec claims LexisNexis refused to negotiate: "They decided not to work with us on this."

The stolen data is now circulating on underground forums.

Why this matters: LexisNexis holds legal research data for much of the U.S. justice system. Federal judge data in the wrong hands creates serious security risks: targeted phishing, doxxing, or worse.

Sources: [8] The Register, [9] BleepingComputer

Defense Contractors Dropping Claude After Pentagon Blacklist

The Pentagon's "supply chain risk" designation against Anthropic is having the intended effect [10].

CNBC reports that defense tech companies are dropping Claude to preserve their government contracts. Any contractor that works with the Pentagon may not do business with Anthropic under the designation.

The threat isn't hypothetical. Defense contractors are making calculated business decisions: Claude access vs. military contracts. The military contracts are winning.

FCC Chair Brendan Carr piled on, saying Anthropic "made a mistake" and should "correct course" [11]. That means reversing the company's position on surveillance and autonomous weapons.

So far, Anthropic hasn't blinked. But the financial pressure will mount as more defense contractors cut ties.

Sources: [10] CNBC, [11] CNBC (FCC)

Quick Hits

IAB updates Multi-State Privacy Agreement. The advertising industry's privacy framework got its most significant overhaul since 2023. Changes simplify compliance and "reduce partner contracting friction." Translation: make it easier to share your data across ad tech vendors [12]. IAB
Connecticut SB 4 hearing happened. Delete Act provisions, algorithmic pricing disclosure, and facial recognition amendments were debated yesterday. Bill moves to committee vote [13]. Troutman
Kentucky introduces auto content recognition bill. HB 692 would add protections against ACR data collection in the state's privacy law [14]. Troutman
Iranian hackers hit Middle East surveillance cameras. Surge in attacks targeting internet-connected cameras across Israel, Qatar, Bahrain, Kuwait, UAE, and Cyprus [15]. Infosecurity Magazine

FISA 702: 46 Days

Section 702 expires April 20. The White House wants a clean extension. The SAFE Act coalition demands warrant requirements. Neither side is budging.

The NPR investigation today is a reminder of what's at stake. The same agencies that built ICE's surveillance web also have 702 powers. No warrants required.

What to Watch

Today, March 5: PenLink briefing deadline. Will DHS respond or stonewall?

March 10: "Privacy's Defender" book launch (Cindy Cohn/EFF).

March 31: Conduent breach credit monitoring enrollment deadline.

April 1: California "Delete My Data" requests open.

April 20: FISA Section 702 sunset. 46 days.

Last updated: March 5, 2026