Seeing the "_id" : ObjectId() fields indicates to me that this is likely a mongodb instance that was available to everyone.

There's been a lot of talk about these recently[1] that I'm surprised this didn't come up sooner.

[1] https://blog.shodan.io/its-still-the-data-stupid/