Access to IP address + browser fingerprint on two sites that you've recently visited. Doesn't seem that implausable with all the recent security breaches.