nintnint
Privacy & Security·September 22, 2026
You never signed up for it, but hundreds of companies already hold a file on you — and a surprising amount of it is about your money. Where you shop, what you earn, which loans you carry, whether you pay late. This is the business of data brokers, and in 2026 the amount of financial data flowing through it finally has a price tag on it: a February 2026 Joint Economic Committee report found that data broker breaches have cost U.S. consumers more than $20.8 billion in identity-theft losses since 2017.
The good news is that 2026 is also the year you got real tools to fight back. Here's who these companies are, what they know about your finances, and how to claw your data back.
A data broker is a company that collects personal information about people it has no direct relationship with, then sells or licenses it to whoever will pay.
You've never heard of most of them because you're not their customer — you're their inventory. Privacy Rights Clearinghouse identified 750 unique data brokers registered across state registries as of 2025, and even that is a floor: the same review found hundreds of companies registered in one state but not others where the same law applied. The real number is almost certainly higher.
They assemble your profile from public records, loyalty programs, app permissions, browsing trackers, and other brokers. No single purchase looks like much. Stitched together, it becomes a dossier.
Financial information is some of the most valuable data a broker can hold, because it predicts behavior lenders, insurers, and advertisers will pay for.
Depending on the broker, your file can include estimated income, credit-tier bands, the loans and cards you carry, real estate and mortgage records, and inferred "spending propensity" scores. A 2021 Duke University review of ten major brokers found listings advertising categories most people assume are off-limits entirely — down to real-time location history and military-service records.
Why does this matter beyond the creepiness? Because the same profile that helps a lender pitch you can also be used to set your price. Regulators are now actively investigating personalized pricing — companies charging you more because your data suggests you'll pay it. Your financial data isn't just being sold; it's being used against your wallet.
This is exactly why we built nint the way we did. Your transactions, budgets, and balances are processed locally, on your own device, and they stay there unless you explicitly choose to sync them between your own devices — never routed through a server we (or a broker) could mine. Join 20,000+ people who track their money without feeding a profile they can't see. An app that helps you understand your finances shouldn't quietly become one more source in your broker file.
Two things collided this year: the cost became undeniable, and the law caught up.
On the cost side, the $20.8 billion Joint Economic Committee figure came from just four broker breaches — Equifax, Exactis, National Public Data, and TransUnion — that together exposed 651 million records. A broker holding a rich financial profile is a far more valuable target than any single app, and when it's breached, the fallout is identity theft, not just spam.
On the law side, 2026 is the first year with real teeth. Six states now require data brokers to register: Vermont (since 2018), California, Texas, Oregon, Connecticut, and New Jersey. New Jersey's new law took effect immediately in 2026 with registration fees up to $1.5 million. And enforcement is arriving — California's privacy regulator issued more than $4.2 million in penalties in Q1 2026 alone.
The catch: a Stanford study published in August 2026 found that only about 9% of data brokers were actually complying with California's registration law. The rules exist; getting brokers to follow them is the next fight.
You can't un-invent data brokers, but you can shrink your footprint. Here's the realistic playbook for 2026.
Use California's DROP platform if you're eligible. California's Delete Request and Opt-out Platform, launched January 1, 2026, lets a resident send one request that reaches every registered broker in the state at once. More than 325,000 people signed up before enforcement began. Brokers must process requests on a rolling 45-day basis starting August 1, 2026, and must keep your data deleted if they re-collect it. The request takes under 10 minutes at privacy.ca.gov/DROP; status can take up to 90 days to update.
Opt out manually if you're not in California. There's no universal opt-out elsewhere, so you file with each broker's "Do Not Sell My Info" page individually. Be honest about the effort: one removal service estimates a full manual sweep takes roughly 304 hours. Prioritize the largest brokers first.
Plan to repeat it. Brokers commonly re-collect and relist your information within 60 to 90 days, which is why both DROP and paid removal services run on recurring cycles, not one-time sweeps. Set a quarterly reminder.
Cut the data off at the source. Every opt-out is cleanup after the fact. The bigger win is not generating the data in the first place — tighten app permissions, decline "connect your accounts" prompts you don't need, and favor tools that keep your financial data on your device instead of on servers that feed the same pipeline.
Data brokers have quietly built a market on your financial life, and in 2026 the bill came due: $20.8 billion in losses, 750-plus brokers, and a regulatory system still struggling to make them comply. You now have more power than ever to delete what's out there — but every removal is a cleanup after the leak.
The most private financial data is the data that never leaves your device in the first place. Ready to take control of your financial privacy? Try nint free at nint.app — your finances, your device, your rules.
Continue reading: 5 Red Flags Your Finance App Is Selling Your Data and The Hidden Cost of Free Finance Apps: You're the Product.
Join 20,000+ users who have secured their financial future with nint's private vault technology.
Related Posts
