in 2017, Congress gave internet service providers (ISP's) the right to monetize, sell, trade, or use (analyze content for commercial purposes) information sent over their networks for their financial benefit to them or a "third party" and in real time. And, that they are not liable for identification mistakes. All that's in the very, very fine print of any service agreement.
The Federal Trade Commission's Oct 2021 circular bulletin or whatever they call it warns about this. How would they identify his expensive car without a VIN or plate number--couldn't be easier--through DMV databases associated with the name of the payer of the internet service account or the address listed on the "auto-bill" credit card payment with that hook-up or people who live at that street address. Mention in a communication that you need any kind of service performed and it can get sold off and often does--depending on if some A.I. algorithm senses money can be spent somehow or it is of a certain value. My coworker last month got 9 text messages to his cell phone, 7 e-mails to his PC and 2 voice telephone calls all in about a 3 hour span from plumbing companies, emergency drain cleaners, etc....after he mentioned to his wife in a text that their shower drain was slow and he was going to call "Roto Rooter" and see how much a call -out would be to do that one and the other shower drain at their home.