Radaris Data Broker Loses Domains in Privacy Lawsuit: What Happened and Why It Matters

Radaris operated as a people-search and data broker service, aggregating personal information from public records and other sources to create detailed profiles searchable online. The lawsuit, rooted in New Jersey state law, centered on Radaris's handling of removal requests from law enforcement officers whose personal details the company had published. According to court filings referenced in reporting by security journalists, Radaris's attorneys were accused of stonewalling the plaintiffs and making contradictory statements during litigation. Rather than continue the legal battle, the judge took the unusual step of ordering that radaris.com and related domains be transferred to the plaintiffs as a remedy.

This is not a domain seizure by law enforcement in a criminal proceeding; it is a civil judgment compelling asset transfer. The distinction matters because civil remedies like this rely on the winning party's ability to enforce the judgment and, in practice, on domain registrars and upstream providers respecting the court order. Radaris's parent company and legal team have options to appeal or seek a stay, so the long-term outcome remains contingent on the appeals process.

Data brokers aggregate personal information from public records, commercial databases, and other licensed sources, then resell access to this data through various websites and services. Radaris's empire included multiple domain names and people-search portals, each designed to reach different search behaviors and demographics. A user could search by name, address, phone number, or email to retrieve dossiers that included past addresses, relatives, possible associates, and sometimes employment history.

The business model is legal under federal law; the Federal Trade Commission does not categorically ban data brokers but instead enforces rules around transparency and opt-out mechanisms. However, individual states have begun imposing stricter requirements. New Jersey's law, for instance, creates specific protections for law enforcement officers and their families, recognizing that public posting of a police officer's home address creates a tangible physical safety risk. Radaris's alleged failure to honor removal requests from officers and their relatives under this state law became the centerpiece of the litigation.

Domain transfer as a civil remedy is relatively uncommon and signals judicial frustration with a party's litigation conduct. By ordering the transfer, the judge was not simply imposing a fine; the court was removing the company's ability to operate its primary advertising and revenue channel. This creates two layers of consequence: immediate loss of business infrastructure and a public demonstration that repeated refusal to comply with removal requests can result in loss of assets, not just fines.

For privacy advocates and individuals trying to delete their data from the internet, this case provides a template. Rather than relying solely on the company's advertised opt-out process, individuals or groups harmed by a data broker's practices can pursue civil litigation under state privacy laws. The threat of asset seizure may create stronger incentives for compliance than regulatory warnings alone.

Data brokers typically require removal requests be made through their website or by email, often with proof of identity. The process is intentionally opaque and time-consuming. A person might request removal from Radaris's main site only to find their data still searchable through a sister site operated under a different domain or brand name. This fragmentation is not accidental; it creates friction for users while maintaining revenue streams. If a person gives up halfway through the removal process, the data stays published.

Radaris's approach reportedly included ignoring requests, asking for repeated identity verification, or claiming certain data "could not be removed." From the company's perspective, compliance is a cost with no revenue benefit, so the incentive structure pointed toward delay and obstruction. The lawsuit changed that calculus by making non-compliance costly in ways that opt-out procedures alone never could.

If your data appeared on Radaris or its related services, the domain transfer does not automatically remove your information from the internet. However, it may prevent the company from continuing to monetize and update those profiles. Your data may have been sold to other brokers, scraped by other services, or purchased by commercial users before the transfer. This is the larger problem with data brokers: once information is in commercial circulation, a single company's shutdown does not eliminate it.

The practical step is to request removal from other active data brokers independently. Many states now have data broker registries or required opt-out mechanisms, though these vary widely. Some brokers honor removal requests through established channels; others make the process deliberately difficult. Understanding that legal accountability exists, as the Radaris case demonstrates, can empower individuals to escalate complaints to state attorneys general if a company refuses valid removal requests.

Three insights shape the reality of data broker oversight. First, the Federal Trade Commission enforces data broker rules through enforcement actions and consent decrees, but these typically result in fines and monitoring requirements, not operational shutdown. A 2023 FTC report found that data brokers continue operating even after regulatory action; fines are treated as a business cost. Second, state-level privacy laws like New Jersey's have become the more effective lever, because they create private rights of action, meaning individuals and groups can sue directly without waiting for federal regulators. Third, domain transfers are unusual; most civil judgments result in monetary damages that plaintiffs must then enforce through collection procedures, which are often ineffective against judgment-proof entities that shift assets. The Radaris case appears to have avoided that trap by targeting a core business asset.

Law enforcement records show that data brokers have historically resisted transparency around their data sources and sale practices. Court documents from prior cases reveal that brokers often cannot accurately describe where their information originates, making it difficult for individuals to demand deletion at the source. This opacity is why civil suits that force compliance through asset seizure represent a shift in enforcement approach.

If you want to reduce your footprint on data brokers, start by identifying which services are publishing your information. Search for your name and phone number on common people-search sites and document where your data appears. Most data brokers offer opt-out forms, but response times and success rates vary dramatically. Prioritize removal requests to brokers that publish high-risk information like your home address or that serve specific purposes you object to, such as employer verification sites.

Understand that opting out is not a one-time action. Data brokers continuously ingest new data, so your information may reappear months later. Consider filing complaints with your state attorney general if a broker ignores removal requests, citing the Radaris case as evidence that legal accountability exists. Some states have data broker notification requirements, meaning brokers must inform you of what they hold. Use that information to build a removal strategy. Keep records of removal requests and responses; these become evidence if you ever need to pursue legal action yourself.

Source: Krebs on Security