Over 10,000 aircraft operators and more than 13 million users could have had their personal details and passwords inadvertently exposed, possibly including thousands of Australians.