You assume the false advertisement would be done lawfully. People who hack places to publish list of embarrassing information don&#x27;t do so legally, so why should we assume that people who abuse data mining services would only be lawful entities?<p>The false advertisement might say something like &quot;save 50% of your next amazon purchase&quot; or &quot;try out our new car service by getting the first trip free&quot; or any other ways of getting people to voluntarily filling in information which looks completely innocent. All you need is the additional information of name and address, which for the user feels completely separate from the sensitive information which was surreptitiously inferred through the targeted advertisement.<p>This assuming they can&#x27;t simply push some malware and get the name that way. We constantly hear about tor hidden service attacks done by de-annonymize people with flash&#x2F;java&#x2F;browser exploits.