The Internet of Things vendor confirmed that customer data was left unsecured on an Elasticsearch database.
Source: Threadpost