. . . . "Their personal data, including names and Social Security numbers, was stored on an FTP server accessible through a Web search." .