CoreWeave, an Nvidia-backed artificial intelligence startup that rents out chips to other companies, announced Friday that it has a new $650 million credit line to expand its business and data center portfolio.

The cloud infrastructure company said it’s raised $12.7 billion from equity and debt investors in the past 18 months, including a $1.1 billion round in May at a $19 billion valuation.

By the end of 2024, CoreWeave plans to have 28 data centers across the U.S. and abroad — including locations in Austin, Texas, Chicago, Las Vegas and London — and it plans to build another 10 data centers in 2025. In the past, CoreWeave has supplied Microsoft and French AI startup Mistral with graphics processing units, or GPUs.

As of last year, CoreWeave reportedly had $2 billion in revenue under contract lined up for 2024.

AI models are notoriously expensive to build and train, requiring thousands of specialized chips that, to date, have largely come from Nvidia. Most, if not all, tech companies that are power players in AI spend between hundreds of thousands and billions of dollars on Nvidia chips to make their models work. And in addition to developing the chips, Nvidia has taken stakes in emerging AI companies like CoreWeave, partly as a way to make sure its technology gets widely deployed.

Goldman Sachs, JPMorgan Chase and Morgan Stanley led the financing CoreWeave announced Friday, with participation from Barclays, Citi, Deutsche Bank, Jefferies, Mizuho, MUFG and Wells Fargo.

“This credit facility provides additional liquidity to accelerate our growth strategy and capitalize on new opportunities in the rapidly evolving AI space,” Mike Intrator, CoreWeave’s co-founder and CEO, said in a press release.

CoreWeave’s new credit line is part of a broader trend, as banks are positioning themselves for a slice of the AI gold rush ahead of a number of potential IPOs in the space. The generative AI market is poised to top $1 trillion in revenue by 2032, according to one estimate.

Last week, OpenAI received a $4 billion revolving line of credit, bringing its total liquidity to more than $10 billion. The news came just after OpenAI closed its latest funding round at a $157 billion valuation.

Many of the same banks contributed to OpenAI’s credit line. The startup has an option to increase it by an additional $2 billion.

CoreWeave declined to provide details about the interest rate it’s paying or the timeframe for the credit facility.

Data brokers have long operated in the shadows of the internet, quietly amassing unprecedented amounts of personal information on billions of people across the globe, but few realize just how deep this data collection really goes.

In an age where every move you make online — every click, every purchase, every “like” — is meticulously harvested, packaged, and sold for profit, aggregated personal data has become a valuable commodity, and the global data broker industry is proof of that.

The rise of artificial intelligence tools poses the risk of even more personal information being scraped from the internet and an already opaque world of data brokering becoming even more aggressive, and that is heightening data privacy concerns. A 2023 study from Pew Research found that the American public increasingly says it does not understand what companies do with their data. According to Pew, 67% of Americans say they “understand little to nothing about what companies are doing with their personal data, up from 59% in its previous survey on the subject in 2019. A majority of Americans (73%) think they have “little to no control” over what companies do with their data.

Many people are unaware that something as simple as their phone number can be used by data brokers and bad actors to uncover highly sensitive information, including a Social Security number, address, email, and even family details, said Arjun Bhatnagar, co-founder and CEO of Cloaked, an app that disguises your personal information by generating a unique “identity” for each online account you have.

According to Roger Grimes, an expert at cybersecurity education firm KnowBe4, while many data brokers —especially the more well-known players — sell information responsibly, some of the smaller, unknown brokerages skirt regulations, push ethical boundaries, and exploit data in ways that can lead to misuse or harm. This is partly due to the hazy regulation landscape around data brokerage, which makes it easier for these practices to go unchecked.

Some of the largest providers of data brokerage services include Experian, Equifax, TransUnion, LexisNexis, Epsilon (formerly Acxiom), and CoreLogic, according to a ranking from OneRep, an online personal data management service. People-search services Spokeo and Intelius are also among the top data brokers, according to OneRep. These companies operate across multiple industries, handling both publicly available information and more sensitive consumer data. They offer various services, ranging from marketing analytics to credit scoring and background checks, and all of them have processes for requesting your data or asking for it to be deleted. However, depending on the state you live in, they may not have to comply.

Experian, Equifax and TransUnion are a good place to begin to understand how much the data industry has grown. While many consumers know these companies for their credit services, those are now just one piece of the revenue pie, with broader digital marketing of data increasingly important, according to Jeff Chester, founder and executive director of the Center for Digital Democracy, a Washington, D.C.,-based consumer privacy advocate. And data collection spans much farther across the economy, with companies from grocery stores offering discount programs to streaming video services amassing data that others will pay for. “Today, everyone is a data broker. Having the ability to reach someone online and target has become a core part of business,” Chester said.

“I try to lock down everything as much as I can, but I’m also aware that even though I’m a security expert, I’m probably overexposed,” said Bruno Kurtic, president and CEO of data security firm Bedrock Security.

As a basic step to limit financial risks, he recommends that all individuals freeze their credit reports as a proactive measure against identity theft and to prevent malicious actors from opening new accounts or loans in their name.

The lack of comprehensive regulation around data privacy allows data brokers to operate with little oversight, unlike the General Data Protection Regulation (GDPR) in the European Union.

“There is no comprehensive federal privacy law that specifically regulates the industry, which makes it hard to combat them,” said Chelsea Magnant, adjunct instructor of cyber leadership at NYU’s Center for Global Affairs and a director at corporate consulting firm Brunswick. “We essentially have a patchwork of state laws with varying privacy protections that these companies know how to navigate.”

California was the first to enact comprehensive legislation in 2018 with the California Consumer Privacy Act, giving residents more control over their personal data. In 2020, California voters approved an expansion of the CCPA, called the California Privacy Rights Act, which took effect in 2023. It offers the most extensive protections in the U.S., including data correction, limiting the use of sensitive information, and requiring businesses to honor opt-out preference signals. It also imposes stricter data-protection obligations on companies, such as minimizing data collection.

Since then, about 20 other U.S. states have followed suit; however, the specific rights and thresholds for which companies must comply vary widely between states.

“Different states have different business environments, economies, and viewpoints. This lack of a unified approach, something that protects all citizens across the country, leaves us vulnerable to data brokers,” said Rob Hughes, chief information security officer at RSA.

Even in states where the privacy laws are strict, there is skepticism that smaller companies on the margins of the data brokerage industry will follow them. “They have extremely sensitive data sets under their management, and they have to essentially behave like the most sensitive enterprises. And we know that some of these data brokers just don’t operate businesses like that,” Kurtic said.

To start protecting your privacy, it’s important to rethink how much personal information is shared on a daily basis, says Cloaked’s Bhatnagar. While we can’t fully hide, consumers need to develop new habits and tools to limit what we expose, from turning off permissions that track your location to saying no to cookies and refraining from posting personal details online. Additionally, using tools like secure browsers, VPNs, and tracker blockers can help.

Some of the largest technology companies in our daily lives, such as Apple, are continually updating and adding to privacy options, such as on the new iPhone and latest iOS update.

An Equifax spokeswoman said U.S. consumers can opt out of their personal information being shared in accordance with U.S. state privacy laws. On average, she said, opt-out requests made through the Equifax Privacy Preference Center are processed in less than one business day and consumers are informed of a successful submission through the company’s Preference Center. Consumers can also review the types of third-parties that companies such as Equifax share personal data within its privacy section.

Opt-out links and instructions are readily available for most of the major data brokers:

But data privacy experts says reclaiming or deleting your data from brokers can be a deliberately complex process that is not only time-consuming but frustrating. Each broker has its own opt-out requirements, and even after you’ve removed your data, it often reappears, sourced from other places.

“Removing your data from their systems impacts their bottom line, so they are disincentivized to make this easy for you,” said Henderson. “Ultimately, if you remove the information, they can’t sell that. So the more people who request their information be removed, the less attractive of a broker they are to the advertisers.”

There are data-removal services, such as DeleteMe, Kanary, OneRep, and PrivacyDuck, which charge a fee to manage these ongoing tasks, and are becoming increasingly popular. In October, Consumer Reports launched Permission Slip, a free app that helps you control which companies can collect, store and sell your personal data. It relies on donations to keep it going, either through the app or the Consumer Reports website.

For those opting for the DIY approach, here’s what the data privacy experts interviewed by CNBC recommend to get started:

Identify the brokers collecting your data. As already stated, this can be a daunting task, as many operate behind the scenes. However, there are a few methods you can use to track them down, says Henderson. One is to conduct a Google search using your name, phone number, and email address and see which brokers pop up. You’ll most likely find your name on sites like Spokeo, Whitepages, or MyLife. Another strategy is to visit the websites of the largest data brokers and search your information.

Submit opt-out requests. If you live in a state with data privacy regulations, you can submit a request to delete your data on the opt-out page of these companies’ websites, including at the links listed above, so they cannot share your data with third-party companies. It’s important to note that each broker may have different processes for handling these requests and state laws vary when it comes to what types of data are covered. Some data brokers may also require you to provide identification or verify your identity.

Check your results. After submitting opt-out requests, revisit the data brokers’ sites periodically to ensure your data has been removed. It may take several weeks or months for your request to be processed.

Engage in digital hygiene practices. Regularly reviewing and updating your online security practices is essential. Secure passwords, two-factor authentication, and encryption tools can help protect your information. Using virtual identities, such as alternative email addresses and phone numbers, can further safeguard your personal information.

Seek legal recourse if necessary. If a data broker refuses to comply with a deletion request, you may be able to file a formal complaint with regulatory authorities such as the Federal Trade Commission, which has brought cases against the industry.

However, it’s important to understand that not every state provides the same level of protection. Consult a privacy attorney if you believe your rights have been violated.

AI chipmaker Cerebras is trying to be the first major venture-backed tech company to go public in the U.S. since April and to capitalize on investors’ insatiable demand for Nvidia, now valued at $3.3 trillion.

While its position in artificial intelligence infrastructure represents a major tail wind, Cerebras has challenges — most notably a hefty reliance on a single Middle Eastern customer — that may prove too weighty to overcome in the company’s attempt to ride the Nvidia wave. Valued at $4 billion in 2021, Cerebras is reportedly seeking to roughly double that in its IPO.

“There’s too much hair on this deal,” David Golden, a startup investor at Revolution Ventures who led tech investment banking at JPMorgan Chase from 2000 to 2006, said in an interview this week. “This would never have gotten through our underwriting committee.”

Cerebras launched in 2016 and three years later unveiled its first processor. The company, headquartered in Sunnyvale, California, claims its current chip is faster and more efficient than Nvidia’s graphics processing unit, or GPU, for training large language models.

In 2023, Cerebras’ sales more than tripled to $78.7 million. In the first half of 2024, revenue climbed to $136.4 million, and growth appears poised to ramp up significantly, as Cerebras says in its prospectus that it’s signed agreements to sell $1.43 billion worth of systems and services, with prepayment expected before March 2025.

But the most glaring red flag in Cerebras’ filing relates to customer concentration. One company based in Abu Dhabi, United Arab Emirates, accounted for 87% of revenue in the first half of the year. The customer, G42, is backed by Microsoft, and it’s entirely responsible for the $1.43 billion purchase commitment.

Cerebras doesn’t list any other clients in its prospectus, but it does name a few on its website, including AstraZeneca, GlaxoSmithKline and the Mayo Clinic. Cerebras says in the filing that, in expanding its customer base, the company plans to “aggressively pursue opportunities in relevant sectors such as healthcare, pharmaceutical, biotechnology” and other areas “where our AI acceleration capabilities can address critical computational bottlenecks.”

In addition to its reliance on G42 for business, Cerebras counts the company as an investor, and it’s seeking clearance from the Treasury Department’s Committee on Foreign Investment in the U.S., or CFIUS, to give the Middle Eastern firm a bigger position. G42 has agreed to purchase a $335 million stake by April that, at current levels, would make it the largest owner. G42 can pick up $500 million more in Cerebras shares if it commits to spend $5 billion on the company’s computing clusters.

CFIUS has the authority to review foreign investments in U.S. companies for potential national security concerns. Cerebras said in its filing that it doesn’t believe CFIUS has “jurisdiction over G42’s purchase of our non-voting securities” but added that “there is no guarantee that CFIUS will approve” it. Reuters on Tuesday reported that Cerebras was likely to delay its initial public offering and call off its roadshow, scheduled to start next week, due to a national security review. Reuters cited people familiar with the matter.

U.S. lawmakers have expressed unease about G42’s historic ties to China, through both past investments and customer relationships. G42 said in February that it had sold its stakes in Chinese companies after Rep. Mike Gallagher, R-Wis., chairman of the Select Committee on the Chinese Communist Party, wrote a letter of concern to Commerce Secretary Gina Raimondo about what he called G42’s “extensive business relationships with Chinese military companies, state-owned entities and the PRC intelligence services.”

G42 didn’t respond to a request for comment.

Even if it achieves CFIUS approval, Cerebras has a lot to overcome in trying to sell this deal to investors following a long stretch of suppressed valuations for smaller tech companies and a shortage of IPOs since the end of 2021.

Adding to Cerebras’ list of potential roadblocks is the fact that none of the primary tech investment banks are involved.

Goldman Sachs and Morgan Stanley have long dominated IPO underwriting in tech, with JPMorgan Chase also battling to get in the mix. They’re all absent from the Cerebras deal, and sources with knowledge of the process, who asked not to be named because the talks are private, said they stayed away in part due to the risks associated with customer concentration and foreign investment.

The deal is being led by Citigroup and Barclays, which are both large global banks but not the ones that get leadership positions on top tech IPOs.

Representatives from Citigroup, Goldman Sachs, JPMorgan and Morgan Stanley declined to comment. Barclays didn’t respond to a request for comment.

Cerebras’ auditor is BDO, which isn’t one of the so-called Big Four accounting firms. For the other three venture-backed IPOs this year, the accountants were KPMG (Reddit and Rubrik) and PwC (Astera Labs), which are two of the Big Four, along with Deloitte and Ernst & Young.

BDO declined to comment.

There’s also Cerebras CEO Andrew Feldman, who pleaded guilty in 2007 to one count of circumventing accounting controls when he was vice president of marketing at a public company called Riverstone Networks a few years earlier.

“What else could you have added to this to make it really difficult?” Revolution’s Golden said.

A Cerebras spokesperson declined to comment for this story.

The major Wall Street banks, for their part, are finding other ways to play in the burgeoning AI infrastructure market. Last week, Goldman Sachs, JPMorgan and Morgan Stanley were among a roster of banks that participated in issuing a $4 billion revolving line of credit to OpenAI. And on Friday, Nvidia GPU provider CoreWeave announced the close of a $650 million credit facility that was led by the top three tech banks.

For Cerebras, there’s still a path to an IPO, given the sheer excitement around AI chips and the dearth of investable opportunities in the market.

Also, Nvidia is trading near a record. Mizuho Securities estimates that Nvidia controls 95% of the market for AI training and inference chips used for models like OpenAI’s GPT-4. Venture capitalist Peter Thiel said at the All-In Summit last month that Nvidia is the only company in the space that’s making money.

“Nvidia is making over 100% of the profits,” Thiel said in an on-stage interview at the event in Los Angeles. “Everybody else is collectively losing money.”

Cerebras is still in the money-losing column, reporting a second-quarter net loss of almost $51 million. However, excluding stock-based compensation, the company is close to breakeven on an operating basis.

Retail investor Jim Fitch, a retired homebuilder in Florida, is among those excited about the opportunity to get in early. Fitch, who said he sold out of his Nvidia stock years ago, told CNBC that the benefits outweigh the risks. He noted that Feldman, Cerebras’ co-founder and CEO, sold his prior company, SeaMicro, to Nvidia rival Advanced Micro Devices for more than $300 million over a decade ago.

Fitch is drawn to the promise of Cerebras’ technology, particularly its WSE-3 chip, which the company calls “the fastest AI processor on Earth,” packed with 4 trillion transistors.

“It’ll do the work of 100 Nvidias,” Fitch said.

WATCH: Cerebras CEO on competition with Nvidia