In two separate cases brought by the Federal Trade Commission (FTC), the DC District Court has issued preliminary injunctions calling for the defendant data brokers to ensure that certain personally identifiable information is protected by reasonable safeguards, to cease disclosing such data without appropriate protection, and to notify affected consumers of the data exposure and how they can protect themselves from identity theft. The FTC alleges in both cases that defendants posted extensive personally identifiable information in spreadsheets  on their publicly available websites in an effort to sell debt portfolios to other organisations.

Federal Trade Commission press release