Registrar’s database said to have exposed data