How This Briefing Works
This report opens with key findings, then maps the gaps between what Acoustic discloses and what BLACKOUT observed at runtime. From there: what it means for your organization, what to do about it, and the detection data and evidence underneath.
Key Findings
Analysis pending. Findings will appear here once intelligence collection is complete.
Disclosure Gaps
Claims vs. Observed Behavior
2 gaps
pending
MEDIUM
They Claim
“Awaiting scanner verification”
Observed Behavior
Analysis based on public documentation, Acoustic 2025 Marketing Benchmark Report, and integration partner disclosures
pending
MEDIUM
They Claim
“Runtime email pixel behavior unverified”
Observed Behavior
Email tracking pixel data collection scope and third-party sharing patterns require direct observation
Customer Impact
What This Means For You
Organizations deploying Acoustic face three primary risk vectors: (1) Invisible email tracking creates compliance exposure in GDPR/ePrivacy jurisdictions where pixel-based behavioral profiling may require explicit consent that standard email disclaimers do not satisfy. (2) Cross-channel behavioral profiles aggregate data from email, web, mobile, and SMS touchpoints into unified records that may exceed the scope of original collection purpose, creating data minimization violations. (3) Integration-driven data flows between Acoustic and CRM/CDP/analytics platforms multiply the number of systems holding behavioral data, expanding breach surface and complicating data subject access requests.
Recommended Actions
What To Do About It
Role-specific actions based on observed behavior
Recommended Actions for Acoustic
- →- Audit all Acoustic email templates for tracking pixel deployment and document the data collected per pixel fire (IP, device, geolocation, timing) - Review Acoustic web beacon implementation to catalog all behavioral events being captured and where that data flows - Verify consent mechanisms cover Acoustic's cross-channel behavioral profiling, not just email marketing consent - Map all Acoustic integration data flows to identify where behavioral data is shared with third-party systems - Request Acoustic's data processing addendum and verify data retention, deletion, and subject access request procedures
Negotiation Leverage
- →Leverage: Acoustic's 2019 spinoff from IBM and PE ownership by Centerbridge means the company is under pressure to demonstrate growth and platform stickiness. Their investment in AI-driven personalization creates dependency on behavioral data volume, giving customers leverage to negotiate data minimization terms that limit what Acoustic retains. Key questions: (1) What specific data elements does each email tracking pixel collect, and can pixel tracking be disabled per campaign? (2) How long does Acoustic retain behavioral profiles after a contact is deleted from Campaign? (3) Which integration partners receive behavioral data, and under what contractual terms? (4) Can cross-channel profile unification be disabled to limit data aggregation? Protections to negotiate: Contractual data retention limits tied to campaign lifecycle rather than indefinite retention, explicit restrictions on behavioral data use for Acoustic's own product improvement or benchmarking, and right to audit data flows to integration partners.
Runtime Detections
Runtime Detections
5 BTI-C CODES
BLACKOUT observed this vendor's JavaScript executing in a live browser and classified each hostile behavior using our BTI-C (Behavioral Threat Intelligence — Capability) taxonomy. These are not theoretical risks — each code below was triggered by something we watched this vendor's code actually do.
BTI-C01Defeat Device
Evasion infrastructure, auditor bypass
BTI-C06Behavioral Biometrics
Keystroke/mouse tracking
Impact: Acoustic Connect unifies behavioral signals from email, web, mobile, and SMS into a single profile, enabling automated cross-channel activation that amplifies the tracking footprint beyond any single channel's disclosed purpose.
BTI-C07Session Recording
Full session replay
BTI-C09Consent Bypass
Ignoring CMP signals
Impact: Email tracking pixels fire automatically on open with no per-recipient consent mechanism. Web beacons deploy behavioral tracking before explicit consent for profiling is obtained.
BTI-C10Fingerprinting
Device identification
IOC Manifest
IOC Manifest
323 INDICATORS
Indicators of compromise across 4 categories. Use for detection rules, CSP policies, or Pi-hole blocklists.
TRACK
*www.acoustic.com/_next/static/chunks/*.js*
Tracking script
TRACK
*www.acoustic.com/_next/static/chunks/turbopack-*.js*
Tracking script
TRACK
*www.acoustic.com/js/tealeaf.6.4.65.cloud.light.acoustic.js*
Tracking script
TRACK
*go.acoustic.com/pd.js*
Tracking script
TRACK
*go.acoustic.com/analytics*
Tracking script
TRACK
*go.acoustic.com/dcjs/*/*/dc.js*
Tracking script
TRACK
www.acoustic.com/_next/static/chunks/623aa6316ec10487.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/27b59458e0d9ba5a.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/59c402be24ac0363.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/d5d8c2119539e5ee.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/ed0c9b8dd2504a1a.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/012d566a802c362f.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/7d5cf4b6ac4f71cd.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/23d7c178f4b44903.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/turbopack-9f7d086cebdea8fd.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/22705bdb1fc3686d.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/0762c9155e651e39.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/088f6e825c4ecb6a.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/b0f57bafe227c5d5.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/cab6653e621e83f6.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/43e9496dbca23cd5.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/c72e6380ba88d7aa.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/6c8dc8e1c93be14a.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/12c3e0c6f221f688.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/ae5f16d96998620a.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/7b09cd296dd1c26d.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/21e647384330da8f.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/4958355073a9d903.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/e4cbcd046f8943d8.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/59f2db0068864ab5.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/17917cedaa68b473.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/5412e66f959a959a.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/218f1c9d0f0aca11.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/85c429579d750943.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/f9ac516b558badec.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/b2d3dbf0b5cc1031.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/43c59e6e283823ad.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/e2ba00609e032fef.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/0978b30e7e7508d8.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/5d464d130fc8d7db.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/a7b718f86987548f.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/26c778ebab0ec18f.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/322df82d399d1cba.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/63c5999068aa07b1.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/2b246ed86c489318.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/a1346aa7b162e5af.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/48f2d0b2bef18a31.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/eaa7d64ee09cac61.js
Auto-extracted from scan
TRACK
www.acoustic.com/js/tealeaf.6.4.65.cloud.light.acoustic.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/b3f97063732983d3.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/d73e09e50d6aba88.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/b37ddf25858ffd75.js
Auto-extracted from scan
TRACK
go.acoustic.com/dcjs/959062/1026/dc.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/ac644ed5e4b2d4d3.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/cc08f5034b6dbe78.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/72cf991beff0d9df.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/1c55c117f36de401.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/9174bce77d1c9758.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/eba5f1023f528c51.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/7034197f2d7147c9.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/0fd8bb38ab80abc3.js
Auto-extracted from scan
TRACK
www.acoustic.com/_next/static/chunks/a0e00e68ca0b0bb4.js
Auto-extracted from scan
Ecosystem
Ecosystem & Supply Chain
Acoustic integrates with a broad enterprise marketing ecosystem. Key integration points include: Tealium (tag management and data orchestration), OneTrust (consent and preference management), Salesforce and Microsoft Dynamics (CRM sync), major social platforms (Facebook, Instagram, LinkedIn), and various analytics/BI tools. The platform offers REST APIs, webhooks, and FTP-based data exchange. Previously as IBM Watson Marketing, the platform inherited deep enterprise integration capabilities including connections to IBM's broader cloud and AI services. Acoustic Connect serves as the journey orchestration layer that aggregates behavioral data from all connected channels into unified activation profiles.
Evidence
Evidence Artifacts
Artifacts collected during analysis, available with evidence-tier access.
HAR Capture
Complete network capture with all requests and responses
IOC Manifest
323 detection signatures across scripts, domains, cookies, and network endpoints