Database misconfigurations resulted in a huge data leak which hackers already picked up on.