NCIX customers' personal data have been released.

https://www.privacyfly.com/articles/ncix_breach/#three

Anyone who bought hardware from now-defunct NCIX between 2007 and 2017 has personal data exposed. The personal data was stored on hard disk drives unencrypted. Sample, edited pictures in the link above.

"The nciwww file contained 291 tables from their NCIX US store and had multiple versions of the file with data going back to 2007. The version I spent time analyzing was dated between November 2013 to February 2015. All the various versions of the MDF database files had been unencrypted with the last file being dated in 2017 for most of the databases. The nciwww database contained a thousand records from affiliates listing plain text passwords, addresses, names, and some financial data. In another table of information, I found customer service inquiries including messages and contact information. There were also three hundred eighty-five thousand names, serial numbers with dates of purchase, addresses, company names, email addresses, phone numbers, IP addresses and unsalted MD5 hashed passwords. The database also contained full credit card payment details in plain text for two hundred and fifty-eight thousand users between various tables."