Data profiling is the analysis of personal data to infer behavior, preferences, routines, or identity details. It can be done from obvious inputs such as age, location, and browsing history, or from smaller signals like device type, time of use, and interaction patterns. In cybersecurity, profiling matters because it turns ordinary data collection into a way to predict or influence a person.
Attackers use profiling to target victims with convincing phishing, scam messages, account takeovers, and social engineering that matches a person’s interests or habits. Defenders watch for the same technique in ad tracking, data brokers, and app permissions that expose more information than users expect. Limiting data shared, reducing tracking, and teaching users to question requests for personal details can make profiling less effective.