Honestly, I think this is probably just the tip of the iceberg. I believe that the collection, aggregation, and analysis of our personal data is and will continue to be unabatedly leveraged by both the government and private companies in ways we will not be informed about. I think my European friends are probably better off than I and my American friends are in this department thanks to things like GDPR (which is unlikely to happen in the US because all of our legislators are taking money from lobbyists for these companies), but in the end I think we should all live without much expectation of privacy. It will help us be less disappointed when we find out for sure we've been spied on.
I mean, you could give up your phone and computer and amazon and google and all that, but more devices are coming that you won't personally purchase (traffic lights, security cameras, ATM microphones, facial recognition software, other people's phones, watches, etc) that will compile profiles of you and your behavior anyway. Those profiles will definitely be for sale.
That's not to say you shouldn't take reasonable steps to keep your data secure, just don't expect that you can do it all. That being said, this doesn't surprise me one bit.