This is not just a privacy issue, this is simply violating the GDPR Chapter 3. Art. 21. 2)
Please remove names in URLs asap.