The last one, ouch. Before I was just disappointed, now I am angry.
Never trust a PHP coder!
does this mean we'll have to go silk road to buy our passports back?
From what I understood from thr IRC chat it's an old database with documents.
They stored it previously in the MySQL database.
They had 500,000 verified customers, everyone had to send minimum 2 scanned documents.
If you assume that the average size of a document is 1MB the database should be of 1000 gigabytes size, not 20.
Nevertheless, storing that kind of sensitive data in a (non-airgapped) database is INEXCUSABLE. You just DO NOT DO THAT. EVER.