Yeah, that's the hard part about this. If they have the IP addresses of 10 million people, that's probably less critical than if they have medical data on even

Yeah, that's the hard part about this. If they have the IP addresses of 10 million people, that's probably less critical than if they have medical data on even just 10 000 people. But the IP collection of how-to-live-with-epilepsy.com might be worse, again, since it implicitly carries the information that you do probably have epilepsy.