I can prove it and just cancelled my sirius account because of it:
How do I know you ask? Every few months I google myself to see what records exist on various search engines. Today, I found http://vin.place/index.php#search[1] which listed one of my cars associated with my full name, address, VIN and model number. On a whim, I backed up to the search feature and plugged in my last name (to see my other family members), and the only other car that popped up was for me again.
What's interesting, is that the other car it showed me was not mine. My car is a 2007 Mercedes Sedan, and it showed me a 2008 Mercedes Convertible. But I recognized the car it showed me. You see, when I first purchased my car, the sirius module had been removed by the PO. I did some research and determined that a W211 E-Class mercedes radio was the same model number as a 2008 Mercedes SLK radio. I found one in a junk yard off a wrecked car for 10% of the cost that Mercedes would charge me new and bought it. I plugged it in and to my surprise it was so recent it still had a few month's subscription left.
When the subscription ultimately expired, I called in Sirius to pay for it. When they pulled it up based off of the ESN/SID, they asked me to verify that my car was a 2008 Mercedes SLK. I went ahead and explained to them where the radio came from and gave them all of the new relevant info.
Well I guess that means that on my account there were now two VINs. One for the MB Convertible SLK and then the one for my actual car.
So when I plug in my name on vin.place, it shows me two cars. One, my real car, the other has my correct name and address, but every other attribute is pulled from the wrecked SLK that my radio came from. That is the ONLY possible explanation for how this random website has my name associated with that SLK is that SiriusXM has sold my information, as there is no where else where that VIN would be linked to me.
Shady..... but I guess I shouldn't be surprised. Mods can message me for screenshots if they want proof.