The Ashley Madison hacking scandal is far from over and now users have yet another thing to worry about. Reports say there’s evidence Ashley Madison made millions of dollars from users who paid to have their profiles erased from its databases for good, even though the website still kept identifiable data for each of the deleted profiles.

DON’T MISS: How to figure out if your email was exposed in the Ashley Madison hack

Ashley Madison sold the delete feature for $19, The Guardian reports, promising users it would remove their profiles from the site, including search results. BuzzFeed discovered that the site made close to $2 million for the service in 2014 alone when 90,000 requested such profile deletions.

However, it turns out that Ashley Madison kept a treasure trove of information for each user that’s good enough to identify that person. The company did remove the real name, username, email and profile information as promised but it retained sensitive data that can be used to find out whether a person may have had an account on the extra-marital affairs site.

The company “retained the date of birth, city, state, post- or zip code, country, gender, ethnicity, weight, height, body type and whether the user smokes or drinks,” The Guardian writes.

Meanwhile, here’s how you can check to see whether your Ashley Madison personal data was posted online.

Chris Smith started writing about gadgets as a hobby, and before he knew it he was sharing his views on tech stuff with readers around the world. Whenever he's not writing about gadgets he miserably fails to stay away from them, although he desperately tries. But that's not necessarily a bad thing.