The “personal information” includes “names, addresses, phone numbers, and any criminal records, among other things.”