I would be shocked if insurance companies and credit reporting agencies werent using this technique. It seems that a small amount of real information about a person (that these companies would obviously have) is enough to denanonymize information. We dont know what we are doing when we publish anonymous data. People think I am a crackpot when I say they can take anonymous data and identify a person. I think studies like this prove that I am not so crazy.