Nick Szabo  🔑

Not sure what is so surprising about this?

Put it this way: for which businesses in the crypto space who KYC/AML' their customers do you have strong expectation that they are not and never will share such information? Why do you have such expectations?

My thought would be that my financial information is at least scrubbed if they are selling it, not literally my personal information to anyone.

Why do you expect this? It's much more useful if has specific identifying information that can be linked to your other online activities.

Working on banking software before as well as Healthcare it's pretty common practice to scrub names from the data to prevent it from being identifying. If they are selling it for the personally identifiable information I would assume that is illegal in us / uk at least.

It depends who is receiving the data. In some cases they are legally required to share the information. But the bigger problem is it's trivially easy to copy such information and, especially once shared even a little, a game of whack-a-mole to try to prevent further sharing.

True however these banking companies are audited for breaches so the company who breached would be responsible to disclose. These companies should be held to the same legal standards and likely are in breach and if so they should be held legally responsible as well.