How stealing your data just got easier