Yes, I'm afraid it is true.
Your ISP most definitely can and WILL report suspicious activity.
It is all under the t.o.s. contract signed when you first signed up.
Law enforcement have been known to contact them for possible incriminating evidence.
Be smart, use a proxy.
Anonymity is always key.