Yves Rocher is the latest company to suffer from a data leak. In all, 2.5 million Canadians have been exposed thanks to an unprotected ElasticSearch server.