Shoddy cyber security at Ukrainian vehicle inspections has exposed hundreds of thousands of personal documents for the past four years, placing reams of personal data at risk of exploitation by bad actors, including Russian intelligence and hackers.

Largely scans of passports, taxpayer identification numbers, driver’s licenses and vehicle registrations, the documents span a broad stretch of Ukrainian geography and demography. Mostly, they identify people who were buying or selling used cars internationally.