They should be sued for that.<p>There is no way most customers are informed and intentionally consenting to them tampering with the HTTP requests they send to include their customer ID.<p>The obvious expectation of a customer of an ISP is that it sends the data through unchanged.