Data collected for two-factor authentication purposes “inadvertently” matched users to targeted-advertising lists, the company admits.
Source: Threadpost