[tptacek]

By "pretty common", you mean, "I've heard of it", right?

[mirimir]

Point taken. But I've heard repeatedly about it, involving different sorts of illegal data, over some years. And the discovery rate is arguably low. That suggests to me that it's common.