Nearly 2 million records from terrorist watchlist exposed online