The allegedly exposed dataset includes ‘sensitive information’ such as usernames, physical addresses, phone numbers, email ...