Another approach is to run some SQL statements to obliterate the user
names and any other private info.
For example:
UPDATE users SET name = CONCAT('user', uid);
Similar things can be done to the profile.
The user passwords are not a concern since they are stored as an md5
hash anyway. If you are really uptight about security, then mangle
them too.