More than 5 million records were exposed in an online database.