Summary
European cloud provider Nextcloud exposed 367,000 records, including employee and client data, due to an unprotected ElasticSearch cluster on the public internet. Cybernews researchers discovered the breach, which Nextcloud attributed to a hosting misconfiguration, though the extent of potential unauthorized access remains unclear.