I wanted to share my experience requesting my data from the shadowy data broker Socure. You can request your data and read about their process here: Data Protection Rights Request Form - Socure Inc.

This might be overly niche, but I can't find much of anything specific out there so I figured it might be helpful.

I could also use your help. Context is below, but here are my questions:

1. Is there anyone out there who has requested their data, corrected it, or worked with this data in their job?
2. Do you have any advice on how to interpret this report? It came in multiple unlabeled files. The contents of most files seem self-explanatory, but a lot of the records are unlabeled. For example, I see an address I've never heard of in one of the files, but it's in a separate file with a bunch of addresses. So maybe they aren't saying it's my address, maybe they are saying it's the address of someone I did business with or something. I'm really not sure.

I pretty much asked these same questions to Socure, along with some others.

So here is my story:

• I went to that link above to request my report.
• ​​​​​​​I got an email back saying that I should expect a selfie verification text message within 24 hours.
• I got that text message and passed selfie verification pretty easily.
  • This is notable because I just failed some kind of Socure check that also involved selfie verification. This was with a bank. That fail was the reason I requested my report.
• Then I got another email saying that I would get my report within 45 days of the original request.
• But I actually got it about 15 weeks after the request instead of 45. Hell yeah! Thanks to the folks working my case.

Here's what was in my report:

• They said that they might redact some things, but I didn't see anything redacted.
• They gave me a link to a secure portal where I could download an encrypted zip file. The filename of the zip file was my initials, and it contained 5 JSON files called 0.json, 1.json and so on.
• Each json file contained a number of records.
  • One was a list of IP addresses. It seemed legit based on the recent locations, but I didn't check them all.
  • Two were pretty self-explanatory and looked like generic identity info, like addresses, phone numbers, email addresses, SSN, driver's license, etc. I'm not sure why there were two. These included some incorrect name and address information that I removed from ChexSystems by dispute earlier this year.
  • One was a weird file that seemed to be a deep dive into my email or something. Mostly blank but it had a number labeled "confidence."
  • One was similar but had a way longer list of addresses that I've never heard of, except for one wrong address which I removed from Equifax by dispute earlier this year. Anybody have any idea what this list is? I asked Socure a few times; so far they have ignored that question a few times but I have asked a ton of questions so that's understandable. Most recently I asked them only this question, I'll see what they say.