The mobile operator exposes the passport data of customers to third parties