On the leakage of personally identifiable information via online social networks