Data brokers are selling the sensitive data of active US military personnel for as little as 12 cents, a practice that researchers and lawmakers say raises serious national security concerns.