private information exposure