That multinational company is probably going to put your data in an unsecured s3 bucket or a company-accessible excel spreadsheet. So instead of "some strange guy" it's going to be an entire network of people who could use that to rob you directly, plus anyone who works at any of the companies they sell it to, plus people who buy it directly with the intent of spear fishing or ripping you off (legally or illegally).