Passports and photo IDs were left unprotected on the public internet

>This should be a wakeup call for data security.

It seems nothing is.

US people should be aware that passport cards don't contain addresses, so minimize data.