Flaw in property inventory website exposed thousands of users’ home contents