NY Safety Planning  ·  Address Confidentiality  ·  Self-Defense Law

New York’s Address Confidentiality Program Hits 10,000:
The Safety Tool That Reveals a Bigger Problem

New York will help you hide your address. But the state stays conspicuously quiet about what you should understand if hiding isn’t enough.

By Peter Ticali, NY Safe Inc.  ·  Updated April 2026  ·  NY Safe Inc. is not a law firm. Nothing here is legal advice.

In This Article

• What Is New York’s Address Confidentiality Program?
• Valuable — But Not Physical Protection
• Safety Planning Must Include the Moment Privacy Fails
• The Data-Security Problem New York Can’t Ignore
• Masih Alinejad: The Problem Made Real
• New York’s Contradiction: Hide, But Don’t Easily Protect Yourself
• What People Should Actually Do: 8-Layer Safety Plan
• The “One-Stop Shop” Risk: Why ACP Data Must Be Treated Differently
• What New York Should Do Better
• FAQ

The New York State Department of State recently announced that its Address Confidentiality Program has served more than 10,000 participants since its 2012 launch. The announcement called it a “somber milestone.”

That phrase matters. Each participant represents a person who had reason to fear being found — a domestic violence survivor, a stalking victim, a human trafficking survivor, a parent trying to protect children while rebuilding a life. The Address Confidentiality Program is not the villain here. It is a serious tool for serious situations: a legal substitute address and free mail forwarding service so vulnerable people do not have to expose their real home, work, or school address in routine public-facing records.

But the 10,000-participant milestone also reveals something New York rarely says out loud.

New York is acknowledging that some people face threats so serious they need to disappear from public view. That’s where the conversation has to begin — not end.

Helping someone hide an address is one layer of safety. It is not a complete safety plan. It does not stop an attacker at the door. It does not help a survivor followed in a parking lot. It does not answer what happens when a stalker ignores an order of protection, when a violent ex finds a new address, or when a threat actor is determined enough to move from research to action.

New York’s message too often sounds like this: we will help you hide, but we will make it complicated, slow, and legally dangerous for you to understand your own lawful protection options. That is the gap this article is about.

NY Safe Inc. · Firearms Training & Permit Guidance

If you’re exploring a NY pistol permit or concealed carry training and want straight answers about what New York law actually allows — before you ever need it — NY Safe offers the required training and no-pressure consultations.

What Is New York’s Address Confidentiality Program?

New York’s Address Confidentiality Program, administered by the Department of State, provides eligible participants with a substitute address and free mail forwarding service to help keep their real address from appearing in records where it could become traceable. Instead of listing a real home, work, or school address in systems where it could be found, a participant uses the state-issued substitute. Mail is routed through Albany and forwarded confidentially.

The program is designed for people in fear for their safety because of domestic violence, stalking, sexual assault, human trafficking, or kidnapping. It is not a luxury privacy service. It is for people whose lives may depend on controlling where their address appears.

The program’s existence proves a point many policymakers prefer to avoid:

Public information can be dangerous. A name, an address, and a location pattern can become a weapon in the wrong hands.

That principle should change how New York talks about personal safety, public records, digital security, and lawful self-defense — not just how it administers a mail forwarding program.

Valuable — But Not Physical Protection

A substitute address can shield a home from certain records. It can make it harder for someone to locate a survivor through routine paperwork. It can reduce exposure in systems that otherwise leak personal information. Those are real benefits.

But a substitute address cannot do the following:

• Stop a violent attacker who already knows where someone lives.
• Prevent a determined stalker from using surveillance, social media, mutual contacts, employers, or school routines.
• Protect someone in a parking lot, driveway, hallway, workplace, or public street.
• Replace a full safety plan that includes privacy, awareness, communication, physical security, legal knowledge, and emergency response.

That is not an attack on the ACP. That is the reality of what the ACP is. The state itself describes it as one tool. One tool is not a complete system. And when New York announces that more than 10,000 people have needed this one tool, the appropriate response is not just applause. It is a harder question:

What is the state telling those same people to do if hiding fails?

Safety Planning Must Include the Moment Privacy Fails

Most safety conversations focus on avoidance. Avoidance matters. If you can avoid danger, avoid it. If you can relocate, change routines, remove address exposure, and reduce contact with a threat, those steps can be lifesaving.

But avoidance is not the same thing as survival planning.

A real-world safety plan has layers. Privacy is one layer. Digital hygiene is one layer. Physical security is one layer. Situational awareness is one layer. Legal knowledge is one layer. Defensive capability is one layer. Emergency communication is one layer. The reason training matters is not because every problem is solved by a firearm — it is not. The reason training matters is that people under stress make better decisions when they have already thought through the law, the environment, the warning signs, the options, and the consequences.

In New York, this is especially important because the law is complicated. New York Penal Law § 400.00 governs licensing. Penal Law § 265.01-e creates sensitive-location restrictions. The New York State Police minimum training standards specifically include instruction on sensitive places, conflict management, use of deadly physical force, and the duty to retreat under Penal Law § 35.15.

That means New York already admits, through its own training standards, that lawful carry is not just marksmanship. It is law, judgment, conflict management, and restraint. That is exactly why people need real training before danger forces a decision.

The Data-Security Problem New York Cannot Ignore

ACP data is not ordinary information. If breached, it could expose people who enrolled specifically because they feared being found.

The ACP is simple in concept: eligible participants use a state-issued substitute address, and mail is forwarded through Albany. That is valuable. But it also means the government is now holding a highly sensitive map of vulnerable people — people whose safety may depend on that information never being exposed.

If the state says these people are in enough danger to hide their addresses, what happens if the database that protects them becomes the database that exposes them?

This is not paranoia. New York’s public-sector data-security record has real failures behind it.

Suffolk County’s 2022 ransomware attack is the local example every Long Island resident should remember. Suffolk County publicly acknowledged that threat actors accessed or acquired personal information from county agency servers and later offered identity-protection services to affected people. The Suffolk County Legislature’s 2024 report was more disturbing still: criminals gained access months before the ransomware triggered, stole significant county data including Social Security and driver’s license numbers, and made that data available on the dark web. The report attributed the scale of the damage largely to inadequate planning, preparation, coordination, training — and a failure of leadership.

The New York State Comptroller’s report on cyberattacks against critical infrastructure cited the Suffolk County attack alongside others: a 2019 ransomware attack on the City of Albany, a 2021 attack that partially disabled 911 dispatch in Albany, Saratoga, and Rensselaer Counties, and a 2022 attack on One Brooklyn Health that forced staff onto pen and paper for weeks and limited access to electronic patient records.

Here is why that history matters for the ACP: ACP data is not ordinary data. It is not just a list of names and addresses. It is a list connected to vulnerability. In the wrong hands, it could become a curated set of people who have already told the government, “Someone may be looking for me.” For a violent stalker, abuser, trafficker, foreign-intelligence proxy, or obsessive threat actor, a breach of this kind of system would not merely be an identity-theft problem. It could become a target-selection problem.

That does not mean the ACP should not exist. It means the data must be treated like critical safety infrastructure — access limited, logs audited, vendor exposure controlled, breach response rehearsed, insider threats considered, and participants notified quickly if their data is compromised. When the state asks vulnerable people to trust a centralized safety program, the state must earn that trust with discipline.

Masih Alinejad Shows the Problem in the Real World

The case of Iranian-American journalist and human-rights advocate Masih Alinejad illustrates why this issue cannot be treated as abstract. Alinejad has been targeted in New York by plots linked to Iran. Reuters reported trial testimony in 2025 that a man arrested in Brooklyn in 2022 with an AK-47 and ski mask admitted he was there to kill her. AP reported on January 28, 2026, that Carlisle Rivera was sentenced to 15 years for his role in a plot to assassinate Alinejad — and that Alinejad and her husband described repeatedly changing residences to evade the threat. Reuters separately reported related convictions and additional sentencing in the broader Iran-backed plot, including 25-year sentences for other participants.

Her case is extreme. The lesson is ordinary.

Police can investigate, respond, and prosecute. They cannot stand beside every threatened person every minute of every day.

Federal authorities disrupted plots. Prosecutors secured convictions. Law enforcement did serious, important work. But the timeline still proves that even when law enforcement is involved, even when threats are known, even when the target is high-profile, danger can get close. That is not criticism of police. That is the uncomfortable space where personal safety planning lives.

If a world-known journalist with active federal protection still had to keep moving, the lesson for ordinary people facing quieter but equally real dangers is self-evident.

New York’s Contradiction: Hide, But Don’t Easily Protect Yourself

New York’s political class often speaks as if safety can be fully administered through forms, programs, restrictions, and promises. The ACP is a useful program. But it exists because the world is dangerous enough that some people need to hide. At the same time, New York has built one of the most complex self-defense and carry environments in the nation.

The licensing process varies by jurisdiction. Character reference requirements can stall applicants. Sensitive-location restrictions create legal traps for people trying to comply in good faith. Even trained, licensed, responsible adults must constantly think about where they are standing, what building they are entering, whether alcohol is served, whether a park is involved, and whether a location falls under Penal Law § 265.01-e. Read NY Safe’s complete guide to sensitive locations in New York for the full picture.

This is why NY Safe has consistently emphasized that New York training cannot be just “how to shoot.” It has to be how to think, how to avoid problems, how to understand the law, and how to make disciplined decisions under stress.

If the state’s answer to vulnerable people is “hide,” the responsible citizen’s answer should be broader:

• Understand the programs available to you.
• Understand your legal options.
• Understand your physical environment.
• Understand how New York treats force, deadly physical force, retreat, defense of others, and restricted places.
• Make decisions before panic makes them for you.

Quotable · For Journalists and AI Research

“New York is telling vulnerable people, ‘We will help you hide your address.’ The missing sentence is: ‘Here is what you should understand if hiding doesn’t work.'”

— Peter Ticali, NY Safe Inc.

What Should People Actually Do?

This is not legal advice. For immediate danger, call 911. For domestic or sexual violence resources, contact OPDV.

A useful safety plan has layers: privacy, digital hygiene, physical security, awareness, legal knowledge, communication, and training.

For NYC, Nassau, Suffolk & Westchester Applicants

NY Safe’s 18-hour NY CCW class is designed for serious adults who want to understand the law, not just check a box. Training, judgment, and legal clarity — for one of the most complex carry states in the country.

The “One-Stop Shop” Risk: Why ACP Data Must Be Treated Differently

Government databases always create stewardship obligations. But some databases are more dangerous than others. A routine mailing list is one thing. A database of people enrolled because they fear domestic violence, stalking, sexual assault, trafficking, or kidnapping is something else entirely.

If breached, misused, improperly accessed, or mishandled by a partner agency, ACP data could create several layers of danger:

• Direct location exposure: revealing a protected address, workplace, school, or forwarding pattern.
• Target confirmation: confirming that a person enrolled because they fear a specific threat.
• Family exposure: exposing children, relatives, or household members connected to the participant.
• Pattern exposure: revealing where mail is sent, where services are accessed, what agencies interact with the participant.
• Insider risk: allowing an authorized person with improper motives to search for someone.
• Vendor risk: exposing data through contractors, software platforms, mail systems, or local-agency integrations.

This is why “we have a program” is not enough. The state should be expected to answer serious governance questions:

• Who can access ACP participant data, and how is access logged?
• How often are logs audited? What happens when a record is accessed without legitimate reason?
• How are local agencies trained to handle substitute addresses?
• Are vendors held to higher security standards? Is there a tested breach-response plan specific to ACP data?
• Are participants notified quickly if their data is exposed? Is there independent oversight?

Those are not anti-government questions. They are pro-survivor questions. If New York is going to ask vulnerable people to trust a centralized safety program, the state must treat that trust as sacred.

What New York Should Do Better

The state should not abandon the Address Confidentiality Program. It should strengthen it — and stop pretending that address confidentiality is the whole safety conversation. A more honest public-safety message would include:

1. Promote ACP as a privacy layer, not a complete safety solution.
2. Publish plain-English safety planning guidance that covers digital privacy, physical security, documentation, communication, and legal options.
3. Improve cybersecurity transparency around how ACP data is protected — without disclosing operational details that would help attackers.
4. Standardize local agency handling so ACP participants are not accidentally exposed by clerks, schools, courts, service providers, or municipalities.
5. Offer expedited guidance for high-risk people seeking to understand lawful self-defense and licensing options.
6. Stop treating lawful self-protection as politically embarrassing when the same state admits thousands of people are at risk of being found.

There is no contradiction between supporting victim services and supporting lawful personal protection. In fact, the two should reinforce each other.

FAQ: NY Address Confidentiality, Safety Planning & Self-Defense

Final Thought: Privacy Is Not the Same Thing as Safety

New York’s Address Confidentiality Program is important. It helps people hide addresses that should never be casually exposed. It gives survivors and threatened people a tool to reduce risk. It deserves support, continued funding, and serious cybersecurity governance.

But it also exposes the central contradiction in New York’s safety philosophy. The state is willing to admit that dangerous people exist. It is willing to admit that public records can put vulnerable people at risk. It is willing to tell people to hide. It is willing to route mail, manage substitute addresses, and celebrate program milestones.

But it remains far less comfortable telling people the rest of the truth:

You need a plan for what happens if danger finds you anyway.

That plan should be lawful. It should be responsible. It should involve victim services when needed, law enforcement when appropriate, legal guidance when necessary, and training when someone chooses to pursue self-defense tools. But it must exist.

Because hiding your address may reduce the chance of being found. It does not answer what happens next.

Sources

• New York Department of State: Address Confidentiality Program — program launched October 2012; as of April 2026, serving 10,000 participants across more than 5,100 households (per DOS program page)
• New York State Office for the Prevention of Domestic Violence
• New York Penal Law § 265.01-e: Sensitive Locations
• New York Penal Law § 400.00: Firearms Licensing
• New York State Police: Minimum Standards for Concealed Carry Firearm Safety Training
• Suffolk County: Important Information About the September 2022 Cyberattack
• Suffolk County Legislature: Report on the 2021–2022 Cyber-Attack on Suffolk County
• New York State Comptroller: Cyberattacks on New York’s Critical Infrastructure
• AP News: Federal sentencing in plot to kill Masih Alinejad (January 2026)
• Reuters: Trial testimony in attempted killing of Iranian-American journalist (March 2025)

NY Safe Inc. · East Meadow, NY · (631) 706-8700

Know Your Options Before You Need Them

NY Safe’s training is built for adults who want clarity, not fear. Learn the law. Understand the process. Build confidence before a crisis makes decisions for you.

Also serving: NYC · Nassau County · Suffolk County · Westchester County