Have to think that's pretty widespread behaviour.
https://www.datatilsynet.no/en/news/2021/fined-for-accessing...