Would the EFF get involved in a case like this? Feels like it could set an important principle about how weak the link can be between “PII” and the actual person, given the preponderance of data leaks.