[alkonaut]

I’m sure even an amateur without access to any secret data could do this for a large chunk of users already. I’m guilty of re-using online handles and some times associating it with a public email and so on. Once that leads to my social media accounts, there is very little left to find. I think most users practice this non-existent opsec.