Millions of Ecuadorians are at risk of identity theft because a security breach exposed a trove of data including names, phone numbers and birth dates, a cyber security firm said Monday.

Researchers at vpnMentor said the problem stemmed from an unsecured server located in Miami that contained information on over 20 million individuals, most of whom reside in Ecuador. The small South American nation is home to just over 17 million people, meaning nearly everyone could have been exposed.

Ecuadorian President Lenin Moreno said he would push through legislation to ensure stricter data security, while Interior Minister María Paula Romo vowed to hold those responsible accountable.

“The information we’ve received is very serious,” she said.

Experts said Ecuador does not have mechanisms in place requiring companies to protect personal data.