“What began with publicly accessible MongoDB databases has grown to include Elasticsearch clusters, and is now reported to be affecting other technologies. The first report of an Elasticsearch cluster being hit appeared on the official support forums on Thursday from a user who was running a test deployment accessible from the Internet. Today, at least 34,000 MongoDB databases have been erased while the number of Elasticsearch instances has reached over 1,600 and counting.
Currently, the technologies most at risk include:
MongoDB
Elasticsearch
Redis
Cassandra
Hadoop
“
Source: Wide-scale ransom attack in progress: How to protect Internet-facing data stores