The Canadian Securities Exchange has been publishing personal information of investors on its website for 15 years, including home addresses and amounts of their investments, a practice one shareholder rights advocate calls a "disturbing" breach of privacy.