so Gox were also leaking passport scans?