[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-nextcloud-exposed-367k-records-in-misconfigured-database":10,"sections":34},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":24,"tags":25,"sources":29,"feedback":33,"feedback_at":22,"cost_usd":33,"total_tokens":33},4548,"nextcloud-exposed-367k-records-in-misconfigured-database","Nextcloud Exposed 367K Records in Misconfigured Database","An unprotected ElasticSearch cluster left Nextcloud employee emails, client contracts, and internal scripts visible to anyone who found it.","Nextcloud, the open-source European cloud platform, left 8GB of internal data sitting on the public internet in an unprotected database.\n\nSecurity researchers at Cybernews found the exposed ElasticSearch cluster in mid-May 2026. It held around 367,000 records: a mix of employee data, client contracts, internal scripts, and files in PDF, PNG, and Markdown formats. Some of the data was unencrypted, including staff email addresses, client company names and addresses, and invoice-related contact details. After Cybernews notified Nextcloud, the company locked the database within two days and alerted relevant authorities. Nextcloud says it found no evidence that anyone accessed the data without authorization.\n\nThat last claim comes with an asterisk. Without a full forensic investigation, it is impossible to confirm no one else got there first — and Cybernews noted that automated bots routinely scan the internet for exactly this kind of misconfigured database. The irony is hard to miss: Nextcloud's core pitch is that self-hosting gives users control over their data, yet the company exposed its own clients' information through a basic infrastructure slip.\n\nNextcloud stressed that the problem was a misconfiguration of its own hosting environment, not a flaw in the Nextcloud software itself — so customer-run servers were not affected. That distinction matters for the product's reputation, but it does not change what was sitting in the open for however long before researchers found it.","[\"security\",\"cloud\",\"data-breach\",\"open-source\"]","2026-07-09T12:10:00.000Z","2026-07-09T21:34:16.234Z","2026-07-09T21:34:19.250Z","published",null,[],"security",[24,26,27,28],"cloud","data-breach","open-source",[30],{"name":31,"url":32},"TechRadar","https:\u002F\u002Fwww.techradar.com\u002Fpro\u002Fsecurity\u002Fnextcloud-leaks-367k-records-european-cloud-giant-exposes-staff-and-clients-in-major-breach",0,{"sections":35},[36,41,45,50,55,60,65,70,75,80,85,89,94,99],{"name":37,"slug":38,"count":39,"latest_published_at":40},"AI","ai",2590,"2026-07-16T04:00:00.000Z",{"name":42,"slug":24,"count":43,"latest_published_at":44},"Security",294,"2026-07-15T19:59:48.000Z",{"name":46,"slug":47,"count":48,"latest_published_at":49},"Deals","deals",179,"2026-06-29T20:02:07.000Z",{"name":51,"slug":52,"count":53,"latest_published_at":54},"Policy","policy",158,"2026-07-16T00:02:48.000Z",{"name":56,"slug":57,"count":58,"latest_published_at":59},"Hardware","hardware",122,"2026-07-14T19:46:26.000Z",{"name":61,"slug":62,"count":63,"latest_published_at":64},"Consumer Tech","consumer-tech",93,"2026-07-13T13:20:48.000Z",{"name":66,"slug":67,"count":68,"latest_published_at":69},"Software","software",70,"2026-07-13T19:52:25.000Z",{"name":71,"slug":72,"count":73,"latest_published_at":74},"Science","science",66,"2026-07-10T10:29:37.000Z",{"name":76,"slug":77,"count":78,"latest_published_at":79},"Dev Tools","dev-tools",59,"2026-07-07T04:00:00.000Z",{"name":81,"slug":82,"count":83,"latest_published_at":84},"Gaming","gaming",41,"2026-07-09T04:00:00.000Z",{"name":86,"slug":87,"count":83,"latest_published_at":88},"Startups","startups","2026-06-29T20:55:50.000Z",{"name":90,"slug":91,"count":92,"latest_published_at":93},"General","general",29,"2026-07-10T22:28:58.000Z",{"name":95,"slug":96,"count":97,"latest_published_at":98},"Reviews","reviews",20,"2026-06-24T12:00:01.000Z",{"name":100,"slug":101,"count":102,"latest_published_at":103},"How-To","how-to",6,"2026-06-16T09:00:00.000Z"]