Why anonymization alone no longer protects sensitive data