Online gift card store exposed hundreds of thousands of people’s identity documents