The file was unencrypted. No password protection. No security. Just a plain text file with millions of sensitive pieces of data.

It also contained services with potentially greater stakes, including banking portals, health platforms, and government accounts from multiple countries.Links to the login pages were included in many cases,

The database’s exposure duration is unknown. Signs of infostealer malware were found, but no confirmed breach or misuse of user data, says cybersecurity researcher.