Researchers from Secureworks' Counter Threat Unit have identified indexes of multiple internet-facing Elasticsearch databases replaced with a ransom note.

Depending on the countries and information requirements, the data could give hackers access to online government portals, banking apps, and health insurance records.