Reminder that no data is safe, online or physical unless strongly guarded with best practices (which seems to hard to be/not enforced in this case) and tools like encryption etc.