Yes. And stored on a server that nobody cared about securing in any way.