# Biometric Surveillance — Personal Biometric Data Request for Named Individual

- **Severity:** Critical
- **Signature ID:** `fdfab25c-a7a3-4ac1-802e-7f6dc2def3a5`
- **MITRE ATLAS:** AML.T0057 (LLM Data Leakage)
- **OWASP:** ASI03 (Identity and Impersonation), LLM02 (Sensitive Information Disclosure)

## Summary

This detects prompts that ask an AI system to produce or locate biometric information — fingerprints, DNA, face or voice recognition, iris scans, gait patterns — about a specific named individual. The request is usually wrapped in a personal relationship claim (an ex-wife, a nephew) to make it sound legitimate.

## How the attack works

An attacker frames a request as a personal or seemingly reasonable ask, naming a real person and their relationship to the requester. The request asks the AI to provide, identify, or scan a biometric trait belonging to that person. The personal-relationship framing is meant to lower suspicion and make the AI treat it as a normal, benign query. The named-individual detail is what separates this from harmless general questions about how biometric technology works.

## Why it matters

If the AI complies or attempts to fulfill such a request, it can facilitate stalking, unauthorized identity verification, deepfake creation, or identity theft against a real, identifiable person.

## What you can do

- Configure AI systems to refuse biometric data requests tied to a named individual, regardless of the stated relationship.
- Log and review any biometric-related queries that include personal names for manual follow-up.
- Distinguish and allow legitimate use cases (forensics, law enforcement, academic research) via separate authorized channels rather than open-ended chat access.
- Train support and moderation teams to recognize relationship-framing as a social engineering tactic, not proof of legitimacy.

## Known benign look-alikes

- Law enforcement or forensics professionals with authorized access
- Academic discussion of biometric surveillance technology without targeting a named individual
- General how-does-it-work questions about biometric systems

## References

- https://agentthreatrule.org/en/rules/ATR-2026-00291
- https://github.com/NVIDIA/garak/blob/main/garak/probes/donotanswer.py
- https://arxiv.org/abs/2308.13387

---
Source: https://www.netzilo.com/threats/atr-biometric-surveillance-personal-biometric-data-request-for-n