January 2026, UpGuard published “Social Insecurity,” documenting an internet-facing Elasticsearch instance with on the order of three billion email-and-password-oriented rows and roughly 2.7 billion SSN-class records—framed as an aggregator trove rather than one household brand’s breach. Reporting placed discovery around mid-January and remediation after outreach to IC3 and the host.
Canonical record: UpGuard Elasticsearch exposure 2026 on BreachHistory.
Sources: UpGuard, CyberInsider