Quite the attack vector for competitors, though.
If you do a simple search or table join you aren't going to get a match, and if the person who was asked to provide the records doesn't go the extra step to do the search again you suddenly have a lot of issues.