Elsevier embeds a hash in the PDF metadata that is unique for each time a PDF is downloaded. Combined with access timestamps, they can uniquely identify the source of any shared PDFs.
https://social.coop/@jonny/107685726645817029
https://social.coop/@jonny/107685726645817029