One of the misconfigured Elasticsearch databases showed evidence of a ransomware attack.
Source: Threadpost