A database of thousands of credit cards was left exposed on the open internet