A massive website design flaw allows unauthorized access to hundreds of millions of sensitive mortgage and banking documents without any password requirement.