FormGet leaked hundreds of thousands of user-uploaded files