I am not aware, but to be honest, I am also not surprised. I am not sure why the info is worth selling/buying. I mean, I can totally understand that governments may want to surveil bitcoin and, in this effort, they will need to ask KYC exchanges for clients' info. But, who else would be interested in buying them and why? Marketing companies? Or anything more shady?
Not everyone on the internet does legal things, right? There are always some bad people. You never know if your identity was used by a hacker or a bad person. You should consider reading
What happens when your identity is stolen -- real story || Avoid CEXs!. The identity of that guy was stolen somehow and he was in massive trouble for that.
You can also read
Coinbase Admits Its Former Data Provider Sold Client Data. We don't know what are they doing with those user's data. But, whenever you search for a user profile on the internet, you will find some full profiles of some citizens. How do you think those data were collected? I know some survey worker pretend to be USA citizen and use those data to make their profile.
Well, if we talk about personal data collection, I think not only centralized exchanges are selling customer data to other third parties but even banks and other organizations like apple or Google are also doing that. That is why many people do not participate in the cryptocurrency market but their information is sold on the internet.
In my opinion, if we are already citizens of a country that has been issued an ID and use devices and services provided by organizations, then our identity has long since ceased to belong to us. And are you sure you don't use your bank account, insurance card, smartphone, email...