I mean, the articles don't suggest it was shared publicly :-) They suggest it was shared with specific companies - but that it was shared nevertheless. That sounds like a serious violation of users' privacy.