An unsecured database on the dark web left the personal information of more than 267 million Facebook users, mostly in the U.S., exposed.

Axar.az reports citing SCMagazine that although the database, discovered by security researcher Bob Diachenko and Comparitech and traced to Vietnam, is now inaccessible, it laid bare names, phone numbers, timestamps, and Facebook IDs and that information also appears on a hacker forum.

Pointing out that Facebook “exposed 540 million users’ data in April after an AWS S3 bucket was left publicly accessible,” Chris DeRamus, CTO at DivvyCloud, said, “this latest incident is alarming because the database was unprotected for nearly two weeks, allowing threat actors more than enough time to access it and use it to launch spear-phishing attacks and commit identity theft.”