Apr 11, 2026 • [email protected] (The Hacker News)
Citizen Lab: Law Enforcement Used Webloc to Track 500 Million Devices via Ad Data
Researchers at Citizen Lab discovered that law enforcement agencies in Hungary, El Salvador, and the United States have utilized a commercial...
Executive Summary
Researchers at Citizen Lab discovered that law enforcement agencies in Hungary, El Salvador, and the United States have utilized a commercial advertising-based geolocation surveillance system called Webloc to track approximately 500 million devices globally. The surveillance tool was originally developed by Israeli company Cobwebs Technologies, which merged with Penlink in July 2023. The system exploits digital advertising infrastructure to collect user location data by embedding tracking mechanisms within ad networks. This capability enables mass surveillance operations under the guise of legitimate law enforcement activities. The findings raise significant concerns about commercial surveillance technology proliferation, inadequate regulatory oversight, and potential human rights implications stemming from unregulated device tracking at scale.
Summary
Hungarian domestic intelligence, the national police in El Salvador, and several U.S. law enforcement and police departments have been attributed to the use of an advertising-based global geolocation surveillance system called Webloc. The tool was developed by Israeli company Cobwebs Technologies and is now sold by its successor Penlink after the two firms merged in July 2023
Published Analysis
Researchers at Citizen Lab discovered that law enforcement agencies in Hungary, El Salvador, and the United States have utilized a commercial advertising-based geolocation surveillance system called Webloc to track approximately 500 million devices globally. The surveillance tool was originally developed by Israeli company Cobwebs Technologies, which merged with Penlink in July 2023. The system exploits digital advertising infrastructure to collect user location data by embedding tracking mechanisms within ad networks. This capability enables mass surveillance operations under the guise of legitimate law enforcement activities. The findings raise significant concerns about commercial surveillance technology proliferation, inadequate regulatory oversight, and potential human rights implications stemming from unregulated device tracking at scale. Hungarian domestic intelligence, the national police in El Salvador, and several U.S. law enforcement and police departments have been attributed to the use of an advertising-based global geolocation surveillance system called Webloc. The tool was developed by Israeli company Cobwebs Technologies and is now sold by its successor Penlink after the two firms merged in July 2023 Hungarian domestic intelligence, the national police in El Salvador, and several U.S. law enforcement and police departments have been attributed to the use of an advertising-based global geolocation surveillance system called Webloc. The tool was developed by Israeli company Cobwebs Technologies and is now sold by its successor Penlink after the two firms merged in July 2023
Linked Entities
- Webloc
- El Salvador National Police
- Hungarian domestic intelligence
- U.S. law enforcement agencies