“we obtained your personal data without consent, now give us $4,500 or we’ll sue you!”