Even more disturbing, it seems that CSE deliberately targeted Canadian IP addresses in violation of the law and contrary to repeated government assurances. They then cross-referenced the IP addresses of file-hosting users with other databases to learn the identity of these users. So basically, ending up as a target for in-depth surveillance could be as easy as clicking on a link.