An unsecured database leaves off-the-grid energy customers exposed