An American Express branch in India exposed millions of customers data online form an unprotected Mongo DB, which allows anyone to access and edit the information. The exposed database contains 689,272 unencrypted Records which includes Amex India customers phone numbers, names, email addresses, and type of card description fields. American Express incident response team and the database was secured now from public access. The encrypted data included 2,332,115 records which included names, addresses, Aadhar numbers (Indian government unique ID number), PAN card numbers and phone numbers.”]
Source: https://gbhackers.com/unencrypted-records-american-express/