The exposure allowed full read-and-write access to the production database, including about 1.5 million API authentication ...