Compromising the privacy of personally identifiable information (PII) can leave users vulnerable to risks, such as identity theft. We conducted a study with 27 participants in which we examined the types of publicly available PII they could locate on their social media accounts, and through a web search. We interviewed participants about the online and offline behaviours they employ to manage their PII. Participants leaked significant amounts of PII through their online presence, and potentially further exposed it through their offline behaviours. Many were surprised at the amount of PII they came across, and immediately took rectifying actions.