The database did not require visitors to enter a username or password to access the information.

Cybersecurity organization Hacken said it found the misconfigured servers as part of a regular security audit. The data appears to come from millions of U.S. residents.

Hacken says the server had authentication disabled and was openly visible on an IoT search engine.