A cyber security expert warned that the data could be exploited for phishing attacks and ‘pose significant risks’