A database of thousands of credit cards was left exposed on the open internet

The data was exposed for at least six months — likely longer.