[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fbrtvnD0HWDqA64ymHJVkERbZJhs25Sn4ZB-ITkzNj3U":3},{"article":4,"iocs":46,"watch_terms":47,"solutions":48,"lesson":51},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":28,"category":29,"article_tags":33},"cb673949-b6b2-4a61-a40e-21a2817f9f79","ICE Wants to Know Everyone Who Bought a Certain Green Beanie From REI in the Last 2 Years","ice-wants-to-know-everyone-who-bought-a-certain-green-beanie-from-rei-in-the-las-c5b01a","Homeland Security Investigations agents hit the outdoor retailer with a controversial subpoena as part of a dragnet search for the identities of protesters who entered a Minnesota church in March.","Homeland Security Investigations (HSI) agents issued a controversial subpoena to outdoor retailer REI, demanding transaction data for all customers in the Minneapolis-St. Paul area who purchased a specific green beanie in the last two years. This action is part of an investigation into protesters who entered a Minnesota church, with HSI also subpoenaing social media companies, airlines, and other entities. Critics argue that the use of customs summonses for such broad data collection constitutes an \"unending fishing expedition\" into the lives of individuals critical of the government.","ICE subpoenaed REI for customer data in a dragnet search for protesters.","https:\u002F\u002Fwww.wired.com\u002Fstory\u002Fice-wants-to-know-who-bought-a-certain-green-beanie-from-rei-in-the-last-2-years\u002F","https:\u002F\u002Fmedia.wired.com\u002Fphotos\u002F6a9a00ee5d2ca173f400bbc9\u002Fmaster\u002Fpass\u002FSecurity_ICE%20Wants%20to%20Know%20Who%20Bought%20a%20Certain%20Green%20Beanie%20From%20REI%20in%20the%20Last%202%20Years_v1.jpg","2026-09-04T10:30:00+00:00","2026-09-04T12:00:09.92301+00:00",7,[17,20,23,26],{"name":18,"type":19},"REI","vendor",{"name":21,"type":22},"green beanie","product",{"name":24,"type":25},"Homeland Security Investigations","threat_actor",{"name":27,"type":25},"ICE","c5c77cdb-f7d7-4990-9436-c81dcbff1163",{"id":28,"icon":30,"name":31,"slug":32},null,"Policy","policy",[34,39,41],{"category":35},{"id":36,"icon":30,"name":37,"slug":38},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":40},{"id":28,"icon":30,"name":31,"slug":32},{"category":42},{"id":43,"icon":30,"name":44,"slug":45},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18,21],{"controls":49,"vendors":50},[],[],{"slug":52,"title":53,"body":54,"framework_refs":55,"framework_notes":67},"broad-government-subpoena-of-retail-purchase-data-raises-mass-surveillance-concerns","Broad Government Subpoena of Retail Purchase Data Raises Mass Surveillance Concerns","Homeland Security Investigations issued an overly broad subpoena to REI demanding transaction records for all customers who purchased a specific product over two years — regardless of individual suspicion — effectively treating an entire customer base as investigative targets. This approach highlights the risk that retailers and other commercial entities pose as repositories of sensitive consumer data that can be compelled through legal mechanisms. The core problem is that REI collected and retained granular, individually identifiable purchase data with no apparent data minimization practices in place to limit what could be handed over. This matters because bulk consumer data collection by governments — even through lawful process — can have a chilling effect on civil liberties and exposes innocent individuals to surveillance simply by virtue of a purchasing decision.",[56,57,58,59,60,61,62,63,64,65,66],"NIST SP 800-53 AC-3 (Access Enforcement)","NIST SP 800-53 MP-6 (Media Sanitization \u002F Data Retention)","NIST Privacy Framework PR.DS-P (Data Minimization)","CIS Control 3 – Data Protection","CIS Control 3.2 – Establish and Maintain a Data Inventory","GDPR Article 5(1)(c) – Data Minimisation","GDPR Article 5(1)(e) – Storage Limitation","GDPR Article 6 – Lawfulness of Processing","CCPA Section 1798.100 – Consumer Right to Know \u002F Data Minimization","ISO\u002FIEC 27001 Annex A.8.3 – Information Handling","ITIL Service Design – Information Security Management",{}]