The exposed fields reportedly included full names, dates of birth, physical addresses, phone numbers, email addresses and national identification numbers.