A security lapse at Cannabis Club Systems, also known as Nefos Solutions, has potentially exposed over one million passports and photo IDs on the public web. The company left the highly sensitive identification documents completely unsecured online, putting countless users at risk of identity theft.