Key Dimensions at a Glance
Sources: Business Research Insights (2024); FBI Internet Crime Complaint Center (IC3) 2025 Report; BusinessTechWeekly citing IBM Cost of Data Breach Report (2024); Recorded Future / Flashpoint 2025 Global Threat Intelligence.
The Invisible Marketplace
We all know this. A random call arrives from an unknown number. The caller knows the exact maturity date of your fixed deposit. Or the renewal date of your health insurance. Or details of your mutual fund investments. Or that your home loan is due for refinancing.
The caller is random. The data is not.
Somewhere, somehow, somebody sold it.
The Data Leak Economy is a thriving, invisible marketplace where personal information is bought, sold, traded and exchanged with astonishing ease. It operates across industries, companies and institutions. Most of us participate in it unwillingly. Most companies publicly deny it.
Yet its existence becomes obvious every time a stranger calls with information they should never have had.
Sources and Channels
Employee Movement
One common source is employee movement. A relationship manager leaves one bank and joins another. Suddenly you start receiving calls from the same manager from the new bank, often a direct competitor. Your investment adviser moves firms and somehow knows exactly whom to contact. Even if portfolio values are not carried across, the contact details certainly seem to be. NDA and non-compete agreements be damned.
Insurance Renewal Data
Insurance is another rich source of data. The most valuable piece of information is often not the policy itself but the renewal date. Companies that have ignored you for eleven months suddenly become warm, friendly and persistent in the twelfth. The caller speaks as though you have known each other for years. That precision is not accidental. Someone, somewhere, knows exactly when your policy is due for renewal.
Retail and the Mobile Number
Retail has perfected its own version of the game. Why does a retailer need your mobile number to sell you a shirt? The standard answer is electronic bills and easier returns. Fair enough. But what follows is equally familiar. A few weeks later the messages begin. Then the WhatsApp promotions. Then the calls. The ten-digit mobile number has become the universal customer identifier because it is easy to collect, easy to store and easy to track.
It is not just Indian retailers. The global brands are no different. All want your mobile number. Nowadays one might ask a simple question: if you want my data, what are you giving me in return? If the mobile number has commercial value, then surely the customer deserves some value too.
Identity Collection Points
Then there are the countless identity checks that have quietly become normal. Hotels ask for identity proof at check-in. Gated communities ask for it at entry. Office buildings ask for it at reception. Security guards and desk staff routinely ask for Aadhaar cards and phone numbers.
The question is not about the need for security. The question is about the need for data collection. Do hotels need the full Aadhaar number? How long do they store it? Who can access it? What security measures protect it? When is it deleted? Why should a private residential complex require information that even government agencies increasingly mask?
Every collection point is also a potential leakage point. Most organisations may handle data responsibly. But the opportunities for misuse are numerous and the incentives are obvious.
Visa and Immigration Data
The same questions arise in the visa process. Many countries require years of financial records, investment details, employment history and evidence of financial stability. The stated objective is understandable: assess immigration risk, security risk and the likelihood of overstaying.
But what happens to that data afterwards? Who stores it? For how long? Who has access to it? What legal remedies exist if it is compromised? Is the data automatically destroyed after a defined period or retained indefinitely? The concern is not that governments are necessarily misusing the data. The concern is that enormous quantities of highly sensitive information are being collected while citizens have very little visibility into how that information is ultimately managed.
Why This Trade Exists
The Data Leak Economy exists because this information has value. For decades companies relied on mass advertising. They bought television spots, newspaper ads and billboards. The message went to everyone and the response came from a few.
Today companies want something far more valuable. They want to know exactly who to call.
Not a million consumers. One consumer. Not all policyholders. Only those renewing next month. Not all investors. Only those whose deposits mature next week. Not all borrowers. Only those likely to refinance soon.
A list of names is useful. A list of names combined with timing, financial behaviour and contact details is immensely valuable. The Data Leak Economy transforms marketing from broadcasting to targeting. That is why companies pay for it.
This is where the economics become powerful. The cost of buying leaked data and running a call centre is often far lower than the patient, time-honoured process of building trust, awareness and relationships.
What We Lose
The First Casualty: Trust
The consequences extend well beyond nuisance calls. Every unknown number is now presumed guilty until proven innocent. Legitimate businesses suffer because consumers assume every caller is a spammer. Independent consultants, sales professionals and small business owners increasingly struggle to establish contact because the reputation of the entire calling ecosystem has been destroyed.
In India, few companies symbolise this phenomenon more visibly than a certain NBFC in India. It is hardly alone. Almost every large company engages in aggressive customer acquisition. This company simply became the most recognisable face of it. The result is that an entire generation now associates unknown calls with loan offers, overdrafts and financial products.
The Second Casualty: Privacy
The more data that circulates outside its intended purpose, the greater the possibility of fraud, impersonation and misuse. Information collected for one reason quietly finds its way into entirely different uses.
The Third Casualty: Control
Individuals increasingly have no idea who possesses their data, how it was obtained, where it is stored or how it is being used. Personal information has become a commodity traded by others, often without the knowledge of the person to whom it belongs.
The Trade Continues
That, ultimately, is the defining feature of the Data Leak Economy. The problem is not merely that data leaks happen. The problem is that personal information has acquired a market value of its own. Entire businesses, marketing campaigns and sales operations now depend on obtaining individually identifiable information.
This is by no means a complete list. The ingenuity of those who break the rules has always outstripped that of those who enforce them, in every country and every era. The trade continues. The calls keep coming. And every time the caller knows a little too much, we are reminded that somewhere, someone is still selling information that was never theirs to sell.