Unprotected MongoDB, tables without password, data in plain text. It's a textbook example of doing absolutely everything wrong.