CBP Workers Allegedly Used Government Databases to Spy on Exes, Crushes, and Colleagues

Internal records obtained by WIRED uncover how, for years, United States Customs and Border Protection employees and contractors were accused of abusing delicate authorities databases for reasons that had thing to bash with their jobs. The records incorporate hundreds of allegations of misuse of instrumentality enforcement databases, including national agents querying information to look up romanticist interests, show household members, exposure assorted idiosyncratic accusation and, successful immoderate cases, supply quality to suspected smugglers oregon drug-trafficking organizations.

Acquired done Freedom of Information Act requests to CBP’s Office of Professional Responsibility and the Department of Homeland Security’s Office of Inspector General, the records uncover the breadth of alleged database maltreatment by CBP employees spanning much than a decade. As migration and borderline authorities grow their surveillance done facial recognition, licence sheet readers, mobile-device searches, and commercially purchased determination accusation generated by mean apps, the sheer scope of these records, which day from 2009 done 2022, highlights however US residents tin be—and person been—targeted by national authorities employees with entree to highly delicate information and almighty tools.

In 1 case, a CBP serviceman allegedly utilized authorities databases to interaction a formation attendant. In another, an serviceman was accused of pulling accusation from trusted-traveler applications to inquire radical out. Other CBP employees were accused of providing border-crossing information to idiosyncratic progressive successful a “heated divorce.” And yet different DHS worker allegedly utilized arguable ad-tech-derived determination information to way respective coworkers’ compartment phones—which appears to beryllium the archetypal known interior maltreatment lawsuit involving DHS usage of ad-tech-derived mobile determination data.

“Customs and Border Protection has a agelong past of impunity and maltreatment of people's civilian and quality rights,” says Laura Rivera, an lawyer with Just Futures Law, a civilian and migration advocacy ineligible organization. “Accountability for their wrongdoing has been elusive, and the dynamic involving the maltreatment of information is simply different facet of that. As our nine adopts much AI, information collection, and surveillance tools, each of america becomes progressively vulnerable.”

The 2009-2022 dataset shines airy connected what officers did with the entree they already had anterior to gaining adjacent much access. According to CBP, integer surveillance tools are expected to assistance officers surface travelers and analyse crimes much efficiently. The records, however, uncover how, successful lawsuit aft case, delicate information collected for law-enforcement purposes was weaponized against backstage individuals.

Breaches and Queries

At the clip these allegations were made, complaints involving CBP unit were initially routed done the Joint Intake Center, which has since been renamed the CBP Intake Center, and the Joint Intake Case Management System, which CBP and Immigration and Customs Enforcement inactive usage for lawsuit tracking. Analysts decided whether each allegation should beryllium retained for information, referred to an employee’s manager, oregon assigned to the Office of Professional Responsibility investigators arsenic perchance superior misconduct.

Of the astir 300 data-related entries identified by WIRED, 138 were referred to CBP absorption for review, 78 were superior capable to beryllium assigned to OPR transgression investigators, and 43 were classified arsenic “Information Only,” meaning OPR did not unfastened its ain investigation. A smaller fig fell into different categories: 12 misconduct allegations were sent for absorption review, wherever they were handled internally by the employees’ supervisors alternatively than by CBP’s cardinal investigators; 3 were logged arsenic “Law Enforcement Records” cases, meaning criminally investigated misconduct; 2 were logged arsenic “Immediate Management Actions,” meaning insignificant misconduct resolved without opening a ceremonial case; and lone 1 arsenic logged arsenic an administrative inquiry, a ceremonial fact-finding probe conducted by CBP’s Office of Professional Responsibility. CBP withheld 21 cases, citing an exemption protecting progressive law-enforcement proceedings, suggesting transgression misconduct.

WIRED identified 99 entries involving alleged breaches oregon unauthorized disclosures of information and 48 explicitly involving improper database queries. Many of these cases happened astir 2020, erstwhile the pandemic-prompted displacement to distant enactment led CBP employees to commencement emailing enactment files to their idiosyncratic accounts.

At slightest six entries explicitly picture employees querying themselves. According to Daniel Altman, the erstwhile caput of the Office of Professional Responsibility, who near his station successful 2025, the bureau treats self-queries arsenic a informing motion of aboriginal misconduct. They often aboveground aboriginal successful corruption cases either arsenic a mode for employees to trial whether searches are monitored oregon to cheque if they themselves are nether investigation. From there, escalation is conscionable a substance of degree.