When Private Information Isn't Private