“Never say never”: lessons from Radioshack’s sale of customer information