Re: Targeting
To criminals maybe, not nation states.
I think you'll find that having control of the personal e-mail of an employee at AWE or BAE systems, or knowing they are on Ashley Madison could be of enormous use if you were hoping to leverage someone to gain access to information on more secure or air-gapped systems.
This is the reason Enhanced Vetting asks some extremely intimate questions about one's sexual preferences and fetishes (amongst other things). Reduces the risk of blackmail because HR already know your dirty secrets an you won't have any problem walking in and saying "I've been approached by someone threatening to release x about me."
Biting the hand that feeds IT
