# Indexes dropped, please\_read index found

**URL:** <https://discuss.elastic.co/t/indexes-dropped-please-read-index-found/71551>\
**Category:** Elasticsearch\
**Created:** [January 13, 2017, 5:22pm UTC](https://discuss.elastic.co/t/indexes-dropped-please-read-index-found/71551 "2017-01-13T17:22:49Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![bkamiche](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bkamiche/32/14559_2.png) [@bkamiche](https://discuss.elastic.co/u/bkamiche)\
**Post date:** [January 13, 2017, 5:22pm UTC](https://discuss.elastic.co/t/indexes-dropped-please-read-index-found/71551/1 "2017-01-13T17:22:49Z")

</div>

All the indexes on my cluster have been deleted for two days in a row, and a suspiciously "please\_read" index as found, although it had no data on it.

The cluster is protected from public internet access, and we don't exactly how to prevent this situation.

Any pointers?

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [January 13, 2017, 5:36pm UTC](https://discuss.elastic.co/t/indexes-dropped-please-read-index-found/71551/2 "2017-01-13T17:36:04Z")

</div>

Read

> [@Ransom attack on Elasticsearch cluster?](https://discuss.elastic.co/t/ransom-attack-on-elasticsearch-cluster/71310/13):
>
> Our ES cluster is also hacked . All the indices were removed and a warning message is shown . please suggest some security measures . Thanks

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 10, 2017, 5:36pm UTC](https://discuss.elastic.co/t/indexes-dropped-please-read-index-found/71551/3 "2017-02-10T17:36:08Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
