It is simply unacceptable that a database of this size was left exposed with no password protection or encryption. This is another example of a big name playing fast and loose with the sensitive data of their customers, and the scale of this leak is particularly embarrassing for Avon.