The gift card store secured the public cloud storage server containing customer ID documents, which was not protected with a password.