Spanish brothel chain leaves internal database exposed online