A stranger’s financial details were visible as he entered the wrong email when signing up to a credit service.