Ecuador is investigating a data breach in which the personal data of up to 20 million people was made available online.

In a blog post, vpnMentor said that its research team, led by Noam Rotem and Ran Locar, discovered the data breach on an unsecured server located in Miami, Fla. The server appears to be owned by Ecuadorian company Novaestrat, a consulting company that provides services in data analytics, strategic marketing, and software development. The vpnMentor research team discovered the breach as part of its large-scale web mapping project.