Nearly one million passports and photo IDs were discovered exposed on the public internet without password protection or access controls, accessible to anyone with a direct link to the URLs.

The Verge

Typing a few letters and numbers into my web browser, I  find myself gaping at the identity documents of complete strangers. The passport of a young woman from Germany. The passport of a man from Spain with glasses resting on his head. The front and back of another man's driver's license, a stereotypically goofy expression on his face.
They were all sitting unprotected at public URLs, with no password or access control of any sort. If I sent you a link, you could have looked at someone's passpor