MoneyBack left a misconfigured database open, with passport info, credit card numbers, travel tickets and other credentials.

Nearly half of them would pay a ransom on connected things to reclaim their data.

Determined group may already have access to operational systems, warns Symantec