The gift card store secured the public cloud storage server that contained customer identification documents, which were not password protected.