The exposed bucket contained 36,951 files, including 633 CSV files containing 1,522,740 records of users who signed up for fitness and wellness activities with businesses that use the Mariana Tek API.