Corporations, data brokers, and even criminals might buy failed companies just for their users’ personal information