Research has revealed that an Australia-based fintech company had a database exposed.