The data is said to have been "made available on an external website without authorization."