This is true. I think Brian Krebs reported on a scam involving this. Some of those data deletion companies actually own the data companies...