A backup containing sensitive information on more than 100,000 AA customers was exposed online, but the company didnt disclose the incident. A server misconfiguration is the root cause for the exposure of data from the AAs online shop. The leak exposed also partial payment details (the last four figures of credit card numbers) of the users and other sensitive information. The incident was publicly disclosed last week when security experts Troy Hunt criticized the way AA has downplayed a massive data breach that exposed about 13GB of DB backups.”]
Source: https://securityaffairs.co/wordpress/60696/breaking-news/aa-data-leak.html