Credit card data, passports, travel information and more of nearly half a million people were exposed. Security researchers discovered that the leaky database was linked to a leading Mexican tax-refund provider MoneyBack. The top passports identified were of citizens of the US, Canada, Argentina, Colombia, Italy, among others