I have to say this sounds like an extremely believable form of shoddy PII stewardship.