Honestly I'm not surprised at all. If we're letting corporations gather this data, and barely regulating where it goes afterwards, it'd be foolish of our adversaries to not buy it. The US needs to pick a lane, and do so quickly - the corporations, or the people. Time has proven it cannot be both.