Thanks! That's what I'm thinking, too. Companies are focused internally on their security, while their customers are consistently targeted with no actionable support.
It would take a lot to be able to doxx, most are using anonymous servers and clean of any direct connection, but causing them pain could show some cracks