Barbara Booth reports for CNBC on cybersecurity, data privacy, and related technology risks, including data brokers, ransomware, online age verification, and election interference.
Barbara Booth is most useful for earned media on cybersecurity, data privacy, ransomware, and related policy risks.
Best for
Best for cybersecurity PR agencies seeking earned coverage with a CNBC reporter on privacy and ransomware.
Not for
This does not fit paid collaborations, sponsored posts, product walkthroughs, guaranteed placement, or usage metrics.
Key takeaways
Data protection fails on mindset before it fails on technology.
Individuals absorb breach costs while the system discourages fixing them.
Safety rules can create a new privacy problem.
Check first: Confirm whether they offer paid formats, rates, or an inquiry route before pitching.
Main ideas
Data protection fails on mindset before it fails on technology · Individuals absorb the cost of breaches, while the system discourages fixing them · Safety rules can create a new privacy problem
Barbara Booth is a journalist whose LinkedIn posts describe their reporting for CNBC on cybersecurity, data privacy, and related technology risks.
The posts point to coverage of data brokers, online age verification, ransomware, election interference, and data protection in regulated industries.
They offer a reason to follow Booth’s work: Booth connects technical and policy issues to consequences for people, companies, and communities.
Before making a fuller account of Booth’s public profile, ask whether they have signature books, shows, businesses, or earlier work that also explains searches for their name.
Across the posts, Booth frames cybersecurity as more than a technical problem.
Their data-broker post starts with everyday online activity and asks how it becomes a commercial asset; their age-verification post sets child safety against adults’ exposure of sensitive identity data; and their ransomware post connects personal data theft to company decisions and government criticism of cyber insurance.
The regulated-industries post adds an organizational diagnosis, pointing to a needed shift in mindset, while the election-interference post broadens the lens to local officials and national unity.
Together, these examples suggest a strength in making security issues legible through their human, business, and policy stakes.
Barbara Booth's reporting for CNBC returns to who absorbs the cost when systems fail and what should change to prevent failures.
Read more
Across the posts, they argue that regulated companies still mishandle sensitive data because of how leaders think about protection; individuals bear the consequences of breaches and the data-broker economy; well-intentioned safety laws can push people to hand over sensitive identity data; and foreign interference has moved from the presidential race to local and state officials cultivated over the long term. They build each story on named outside experts and, in the ransomware piece, on a firsthand data theft.
Data protection fails on mindset before it fails on technology
Booth's through-line is that organizations under heavy regulation still lose control of sensitive data, and that the gap is organizational rather than technical.
Read more
The remedy Booth points to is a change in how companies treat protection as an investment and a habit, not a checklist item. The post states the conclusion but does not name the industries covered or detail the recommended shift, so the specifics live in the linked CNBC article rather than in the post.
A CNBC piece on why numerous regulated industries fall short on safeguarding sensitive data, where Booth calls the biggest takeaway “a crucial shift in mindset.”
Individuals absorb the cost of breaches, while the system discourages fixing them
Booth frames cyber risk from the perspective of the person whose data was taken.
Read more
Companies treat the aftermath as the victim's problem, routine online behavior is harvested and sold, and pressure to change has to come from outside the companies themselves.
They report that the government says cyber insurance companies are making the ransomware problem worse, adding a policy layer to the personal one.
Booth credits practitioners for technical and recovery insights: Paul Underwood, Bryan Hornung, Darren Williams, and Richard Caralli on ransomware, and Arjun Bhatnagar, Roger Grimes, Javad Abed, Jeffrey Chester, Bruno Kurtic, Christopher Henderson, Robert Hughes, and Chelsea M. on data brokers.
Booth writes that personal data was stolen from a national database a few months earlier and that the company's handling made it clear: “It's now my problem.” A companion post describes an investigation into data brokers who harvest “every click, purchase, and 'like'” and points toward practical steps readers can take to regain some privacy.
Booth argues that laws aimed at keeping minors off certain sites push adults to prove who they are with a government ID or face scan.
Read more
The tension is between blocking underage access and the volume of sensitive identity data that then sits with platforms and verification vendors. They give the debate to people on each side rather than resolving it: identity companies Jumio and Socure, the Electronic Frontier Foundation, the Federal Trade Commission, and the Virginia Attorney General's office.
The post asks whether adults should be required to upload a government ID or scan their face to prove their age online, framing the resulting fight over security and who ultimately controls that data.
The threat has moved from the national stage to local officials and the long game
Booth examines where influence operations are aimed and how patient they are.
Read more
Instead of stopping at the presidential race, they report that China is cultivating relationships with local and state officials who could advance its interests over years, deepening internal divisions. They present awareness as the countermeasure and attribute the warning to named federal and nonprofit experts: Javad Abed, Brandon Wales, and John Cohen at the Center for Internet Security, alongside experts from the Cybersecurity and Infrastructure Security Agency.
A CNBC special report on China's interference shifting “away from the presidential race right to our own backyard,” with CISA experts warning that inattention will carry serious consequences for national unity.
What does Booth investigate when personal data is the subject?
Read more
This is the clearest starting point for the privacy side of their reporting: it asks how routine online behavior becomes a commercial asset.
Booth frames data brokers as an invisible industry built on everyday activity: “every click, purchase, and 'like'” is “meticulously harvested, packaged and sold for profit.”
The post describes an investigative report on the depth of that collection and what people can do to regain privacy.
It names cybersecurity and privacy experts who contributed, including Arjun Bhatnagar, Roger Grimes, Javad Abed, Jeffrey Chester, Bruno Kurtic, Christopher Henderson, Robert Hughes, and Chelsea M.
The brief LinkedIn summary links to the CNBC report.
For brands planning a campaign
For a data-privacy thought-leadership pitch, this shows Booth works in the consumer-consequence layer of privacy, not just enterprise compliance. A client with a data broker, consent, or deletion angle can pitch a specific example of how data moves and who profits, rather than a generic “privacy matters” statement.
What is the debate when privacy and safety collide online?
Read more
This post shows Booth covering a concrete policy trade-off: protecting minors versus requiring adults to hand over sensitive identity data.
The post asks whether adults should have to upload a government ID or scan their face to prove age online, noting that new U.S. laws blocking underage users from certain sites are pushing adults into those checks.
It describes the resulting argument over security and who controls the sensitive data.
Booth thanks experts from Jumio, Socure, Berger Singerman, the Electronic Frontier Foundation, the Federal Trade Commission, and the Virginia Attorney General's office.
They link to the story.
For brands planning a campaign
A client selling identity verification, age assurance, or privacy-preserving authentication can use this as a map of the tension reporters ask about: safety benefit versus data collection. The pitch should bring a specific implementation detail or a counterargument from civil liberties, regulator, or processor perspectives.
How does Booth connect a personal data theft to the business decisions behind ransomware?
Read more
This post starts from a direct experience and moves to corporate and government pressure.
Booth writes that a few months earlier their personal data was stolen from a national database and that the company's handling made it clear: “It's now my problem.”
The post says the CNBC piece explores the choices companies face during a ransomware attack and why the government says cyber insurance companies are making things worse.
Booth thanks Paul Underwood, Bryan Hornung, Darren Williams, and Richard Caralli.
The post tags companies and agencies through hashtags, signaling the story's corporate and defense context.
It links to the report.
For brands planning a campaign
For a ransomware or cyber-insurance client, this item signals Booth will follow the victim's experience into the boardroom and policy fight. A strong pitch would offer a named executive willing to discuss a real incident decision—pay, recover, insure, or disclose—and answer the criticism that insurance encourages weak security.
What does Booth treat as a national-security story with local consequences?
Read more
This post explains a shift in reported interference and is a useful entry point for the geopolitics side of their work.
Booth writes that China's election interference is shifting away from the presidential race toward “our own backyard,” with Beijing cultivating relationships with local and state officials.
The post cites experts from the Cybersecurity and Infrastructure Security Agency warning about consequences for national unity, and describes a CNBC special report on how the efforts are driving a deeper divide in America.
Booth thanks Javad Abed, Brandon Wales, and John Cohen at the Center for Internet Security.
The summary links to the special report.
For brands planning a campaign
A public-sector, election-security, or critical-infrastructure client can see Booth's framing: local officials and long-term influence are part of the story. The pitch should avoid a narrow Washington angle and show a state or local consequence, plus an expert who can explain the mechanism rather than repeat the threat.
What is Booth's business-side diagnosis of cybersecurity failures?
Read more
This short post names the mindset problem behind repeated breaches in regulated sectors.
Booth says the piece investigated why numerous regulated industries fall short on safeguarding sensitive data, and calls the biggest takeaway “a crucial shift in mindset.”
The brief post places the problem in investment and organizational behavior rather than only technical controls.
It links to the CNBC article.
For brands planning a campaign
For a client targeting regulated buyers, this is evidence Booth can carry a message about security as an investment and culture question. A pitch should bring a concrete before-and-after from a regulated company—budget, board attention, or risk ownership—not just a product demo.
Investigative reporting on data brokers and personal data
Booth's CNBC investigative report traces how clicks, purchases, and likes are harvested, packaged, and sold to thousands of companies.
Read more
The post examines the hidden data-broker economy and points to practical steps readers can take to reclaim their privacy, drawing on named cybersecurity experts.
For brands planning a campaign
A client with a data-privacy product, consumer research, or a recovery service can pitch practical steps to help readers respond to data-broker collection.
Booth examines the tough decisions companies face after a ransomware attack and reports that the government says cyber insurance companies are making the problem worse.
Read more
The post includes insights from named practitioners on handling the aftermath and communicating with affected people.
Booth draws on personal experience, noting that their data was stolen from a national database and that the company's handling made it feel like the victim's problem.
For brands planning a campaign
A client with ransomware response, recovery, or insurance expertise can contribute to the accountability angle, particularly how victim organizations bear and communicate the cost of an attack.
Online age verification and digital identity trade-offs
Booth reports on new U.S. laws that block underage users from certain websites and require adults to upload a government ID or scan their face to prove their age.
Read more
The post explores the security and data-access debate around that sensitive information, with comments from identity companies, the Electronic Frontier Foundation, the Federal Trade Commission, and a state attorney general's office.
For brands planning a campaign
A client working on digital identity, age assurance, or privacy-preserving verification can join a policy debate over access control and the collection of sensitive data.
Its central takeaway: closing the gap requires a shift in mindset, not just new investment or tools.
For brands planning a campaign
A client selling compliance or data-protection solutions can pitch a mindset-and-culture angle or offer a framework to help regulated buyers move beyond checkbox security toward sustained data protection.
Election interference and local influence operations
Booth's CNBC special report examines China's election interference shifting from the presidential race toward local and state officials as part of a broader strategy to build long-term relationships.
Read more
The post quotes experts from the Cybersecurity and Infrastructure Security Agency and frames public awareness as critical to protecting democracy.
For brands planning a campaign
A client focused on influence operations, disinformation, or public-sector security can offer research on local-level targeting or translate federal warnings into practical guidance for state and local agencies.
Barbara Booth's posts identify CNBC as the outlet that published their investigations into cybersecurity, privacy, and election interference, and name the organizations and companies whose people they interviewed as expert sources.
CNBC
Employment
Booth's posts describe a China election-interference special report, a data-broker investigation, an age-verification story, ransomware coverage, and a piece on regulated industries' data protection as their own work for CNBC, the outlet named on the reporting.
Booth thanks Javad Abed, Brandon Wales, and John Cohen at the Center for Internet Security for insights used in their CNBC report on Chinese interference in U.S. elections.
Joe Kaufmann at Jumio is named among the experts Booth credits in their report on age verification and the identity data adults are asked to hand over.
Barbara Booth reports on cybersecurity, data privacy, and election security for CNBC.
Read more
Explore the work by following recurring questions: who absorbs the cost when a company loses data, what the data-broker economy does with ordinary online behavior, how age-verification rules push sensitive identity data into new hands, and how foreign influence operations have moved from the presidential race toward local and state officials.
Each post is short and names the outside experts they interviewed — identity vendors, the Electronic Frontier Foundation, the Federal Trade Commission, CISA analysts, and a state attorney general's office — mapping who is active on each problem.
This is accountability-and-policy reporting rather than technical instruction: Booth asks what should change and who should be answerable, and points readers to the full CNBC story for detail.
Dahan and Booth work the same seam: how identity data gets collected, who holds it, and what happens when it is aggregated.
Read more
Dahan's posts on surveillance technology scaling faster than accountability, biometric proof-of-personhood, and centralized identity databases as honeypots sit directly alongside Booth's reporting on age-verification ID checks and the data-broker trade. Both treat privacy as a governance question rather than a purely technical one.
Dahan writes as a participant in the policy and investment conversation, recounting a Davos discussion and an interview with investor Bill Tai, and argues from architecture and design principles such as data minimization and verifiable credentials. Booth reports as a journalist, building each story from named interview sources and, in one case, a personal data theft, and pointing readers to a finished news story rather than a design proposal.
Carielli covers the same subject matter from the enterprise inside: breach and privacy-failure trends, the volume of exposed records, enforcement penalties, and what organizations are supposed to do about it.
Read more
Carielli's breach round-up — 10.6 billion records exposed and roughly $2.8B in privacy penalties across major 2025 incidents — addresses the same cost-of-failure question raised in Booth's ransomware and regulated-industry reporting.
Carielli's posts present co-authored analyst research reports, organized around enterprise takeaways and planning timelines such as post-quantum migration deadlines and vendor roadmaps.
Booth's are short news posts tied to a single investigation and credit the interview sources.
A reader choosing between them is choosing between analyst research with recommendations and reported journalism with accountability framing.
Gibler and Booth overlap on security practice and election integrity.
Read more
Gibler's case for AI Zero Trust — identity and access control, data governance, model integrity, runtime monitoring — covers the technical side of problems Booth reports on from the outside. Gibler's account of participating in a 2020 Florida voting-system and procedures audit speaks directly to Booth's reporting on election interference and the integrity of vote-counting systems.
Gibler writes prescriptive practitioner guidance: numbered controls, risk categories, and a webinar invitation aimed at security leaders.
They also write from firsthand professional experience as an auditor.
Booth stays in the reporter's seat, assembling warnings from federal and nonprofit experts and leaving recommendations to the sources.
Barbara Booth reaches the professional readership of their CNBC cybersecurity and data-privacy reporting, with LinkedIn as the visible distribution channel.
Read more
For a cybersecurity PR agency, the key question is whether that audience includes the buyers and practitioners the client needs to influence.
The five posts show reporting built on interviews with named practitioners and officials — a security architect, an identity-verification executive, an Electronic Frontier Foundation lawyer, a state attorney general's office, CISA and Center for Internet Security figures — suggesting an audience of security, privacy, compliance and policy professionals rather than general consumers.
The one measured figure available is 2,122 LinkedIn followers, observed 9 October 2026.
To assess fit, ask Booth or their CNBC/LinkedIn contact for recent performance on comparable stories — a data-broker investigation or a ransomware piece, a long-form TV segment versus a short post — plus any audience survey or platform demographics they can share, including geography, role, seniority and engagement rates.
Treat follower count as reach, not proof that the audience matches a specific client need.
LinkedIn followers
2,122
Follower count shown on Barbara Booth's LinkedIn profile, the account that published the five posts reviewed here · 2026-10-09
None of Barbara Booth’s five posts announces a partnership or sponsorship.
Read more
They cover Booth’s CNBC reporting on cybersecurity, data privacy, ransomware, online age verification, and election interference, credit named interview sources, and link to the published pieces.
None identifies a sponsored format, brand collaboration, rate card, or partnership policy.
Buyers cannot plan around a defined set of paid formats based on these posts.
Instead, they show Booth building reports around interviews with named practitioners and officials, thanking them publicly, and publishing through CNBC.
A brand or PR team with relevant expertise or access is better positioned to contribute to that reporting than to request a sponsored placement.
The posts list no official partnership inquiry route; ask for Booth’s sponsor policy or media kit before planning a paid collaboration.
Strong fit for earned-media outreach. The reviewed beat matches the brief directly, and Booth's working method suits the pitch.
Read more
Brief
A cybersecurity PR agency wants to position a client as a thought leader on data privacy and ransomware, and is looking for a reporter who will treat a named client expert as a serious source.
Reasons
The subject matter overlaps almost exactly. Two of the five reviewed reports squarely match the brief: an investigation into how everyday online activity is harvested and sold by data brokers, and a piece on the decisions companies face during a ransomware attack, including the government's argument that cyber insurance companies make the problem worse. Adjacent pieces cover regulated-industry data protection, age verification and identity data, and election interference, placing a data-privacy client inside the territory rather than beside it.
Booth builds stories from named practitioners and officials, not anonymous vendor comment. The posts credit sources from identity companies, the Electronic Frontier Foundation, the Federal Trade Commission, a state attorney general's office, CISA, and the Center for Internet Security, along with independent consultants and executives. That is the kind of contributor a PR agency can realistically supply.
Booth works the accountability and trade-off layer, where a serious client position can add value: the cost of collection, who controls sensitive identity data, and whether insurance weakens security. A client with a specific position, data, or a named executive willing to discuss a real decision has something to contribute. A product announcement does not.
The outlet is CNBC, so accepted coverage reaches a business and policy readership well beyond Booth's LinkedIn account, which showed 2,122 followers when observed.
Limits
The posts do not mention sponsorship, paid partnership, a rate card, a media kit, or an inquiry route. This is an earned-coverage conversation, with editorial control staying with Booth and CNBC.
The reach case rests on CNBC, not Booth's modest LinkedIn following. No performance data for comparable stories was available, so the agency should not promise a client a traffic number.
These are announcement posts, not the full reports. Before pitching, read the published CNBC pieces in full so the angle responds to the actual argument rather than the summary.
When to choose a specialist
Poor fit based on the posts. This is a different kind of transaction from anything Booth is shown doing.
Read more
Brief
A B2B software vendor selling an AI developer tool wants a paid collaboration: a sponsored post or hands-on product walkthrough from Booth, with guaranteed placement and usage metrics to justify the spend.
Reasons
None of the five posts is sponsored content, a brand collaboration, or a product review. Each is a short announcement or summary of original CNBC reporting that credits interview sources and links to the published piece. The posts show no pattern of paid placements to buy into.
The beats do not connect. The work here covers cybersecurity, privacy, ransomware, identity verification, and election security. There is no developer tooling, software evaluation, or hands-on demonstration content to build on. A paid placement could happen in principle, but the posts do not show Booth working in that format, so the vendor would be buying an untested assumption.
The requested structure conflicts with how the reporting works. Guaranteed placement and editorial performance metrics sit awkwardly with a newsroom process that selects its own sources and controls its own framing. The posts thank interviewees and link to published work, not partners.
The posts provide no published rate card, sponsor disclosure, or inquiry channel, and no audience measurement beyond a follower count. The vendor cannot make a defensible cost-per-result estimate from this information.
For this brief, look at creators who document sponsored formats and can show sponsored-delivery data. Booth is a reporter to pitch, not a channel to purchase on this evidence.
A worked campaign example
Angle
Lead with the insurance and accountability question rather than a product. Offer a client executive who has handled real ransomware incidents and can walk through the sequence in specific terms: how the intrusion was detected, whether the company paid, how the insurer's position shaped that decision, what disclosure looked like, and what the company changed afterward. Pair them with a second source, such as an insurance or policy specialist, who can respond to the criticism that cyber insurers make the problem worse. This gives the story a practitioner view and a counterpoint, a structure the reporting already uses. If the insurance angle is already in progress, a secondary option is the practical privacy question behind the data-broker reporting: what a specific company learned about data it did not know it was exposing, and what it changed.
Brief
Cybersecurity PR agency with a client positioned on data privacy and ransomware.
Next steps
Confirm the proposed executive will discuss named incidents and specific decisions on the record, not general best practice.
Gather one or two anonymized examples with enough detail to stand up to follow-up questions, and clear them for publication.
Read the full published CNBC ransomware and data-broker reports before pitching so the angle extends the existing thread rather than repeating it.
Ask Booth or a CNBC contact about recent performance on comparable stories if the client needs a reach estimate; treat coverage as earned and unguaranteed.
Outreach
Send a short, specific note rather than a press release. Reference the published ransomware and cyber-insurance report, state plainly what the client can speak to on the record, and describe the material they can bring: anonymized incident timelines, a decision the company reversed, or internal numbers on what recovery actually cost. Name the spokesperson and their role, offer a counterpoint source, and give availability. Do not ask to review the story or attach a product deck.
Choose Dahan when the client wants to argue a position in public alongside peers rather than be reported on.
Read more
The posts are first-person arguments over the same ground: surveillance technology scaling faster than the accountability around it, the risk that large centralized identity databases become breach targets, and how verification tools are governed.
Dahan frames the governance question directly, names the tension between fraud prevention and continuous monitoring, and cites other named voices, including an investor and a policy figure, instead of only asserting.
A client with a specific view on data minimization or identity-verification architecture gets a counterpart who will make the case in their own feed.
The format is the trade.
Dahan's reviewed writing is commentary and analysis, not reported journalism.
There is no editor or publication behind it, no outlet with a business and policy readership beyond LinkedIn is documented, and there is no reporting method to inspect: no interview roster, no follow-up questioning, no published article a client can point to as independent coverage.
A client who needs a third party to test their executive's claims, or coverage inside an established publication, does not get it here.
Choose Carielli when the deliverable the client needs is a research framework rather than a story.
Read more
The posts describe analyst work with a defined shape.
One is a quantum-security report with dated migration deadlines, a split of responsibility across security, infrastructure, development, risk, and procurement, and concrete starting moves such as locating cryptographic dependencies and pressing vendors for upgrade roadmaps.
The other is an annual breach and privacy-abuse study built from dozens of top incidents and enforcement actions, with lessons grouped by cause: software supply chain, ransomware, SaaS-to-SaaS exposure, and privileged insiders.
For a client working on post-quantum readiness or breach response, that structure sits closer to the buyer's actual question than news coverage does.
The tradeoff is who the work is about.
In Carielli's posts, Carielli announces and credits team research; the value is the method, the categories, and the ordering of actions, and the client provides data that the analyst's frame organizes.
Coverage would make the client an example inside someone else's model, not the named protagonist of a reported piece.
The posts are also announcements, not the underlying reports, so the analysis itself is known here only through its author's summary.
If the client needs to be the central figure rather than a contributing case, ask for the underlying reports.
Choose Gibler when the client wants operational security guidance delivered to practitioners, or when the subject is election infrastructure.
Read more
One post lays out a complete AI Zero Trust framework aimed explicitly at CISOs, security leaders, and technology executives: identity and access control for every user, system, and API touching a model; data governance; model integrity testing; runtime monitoring; secured pipelines; and human oversight for high-impact decisions, with a webinar announced for that audience.
The other is a firsthand account of taking part in a 2020 Florida voting-systems audit, reporting that the systems examined were found secure and separating machine compromise from foreign influence campaigns.
A client whose position is a practical security control, or who wants a practitioner audience rather than a business newsreadership, is better served here.
The tradeoff is the register and the risk.
Both posts are advocacy and instruction from a practitioner, not reported journalism: the aim is to move the reader to a position or an action, not to test a claim against outside sources, and the audience is largely practitioners.
The election-security account is politically charged, so a client attaching to it takes on that framing whether or not they intend to.
Neither post names an outlet or publication beyond LinkedIn, and no commercial offer appears in the posts.
Barbara Booth's five short LinkedIn posts describe reporting for CNBC on data protection in regulated industries, data brokers, ransomware and cyber insurance, online age verification, and election interference.
The posts name the outlet and the people interviewed, including sources at the Electronic Frontier Foundation, the Federal Trade Commission, CISA, the Center for Internet Security, identity companies Jumio and Socure, and a state attorney general's office, and each links out to the published story.
The underlying CNBC articles and broadcast segments, interview transcripts, and the posts' publication dates are not available in these posts, so statements here reflect what the posts themselves say rather than the full reports.
Posts from three similar creators cover digital identity governance, breach and privacy-penalty research, and AI security and election-audit practice.
Barbara Booth's posts do not mention a signature book, show, or business, a sponsorship or paid-partnership offer, a media kit, or an inquiry route.
These remain open questions before drawing conclusions about the wider public profile; the posts do not establish that no such material exists.
