M7: Privacy attack