Telegram’s built-in contact import feature was exploited to leak the personal data of millions of users onto the darknet.