# Ransom attack on Elasticsearch cluster?

**URL:** <https://discuss.elastic.co/t/ransom-attack-on-elasticsearch-cluster/71310>\
**Category:** Elasticsearch\
**Created:** [January 12, 2017, 4:47am UTC](https://discuss.elastic.co/t/ransom-attack-on-elasticsearch-cluster/71310 "2017-01-12T04:47:27Z")\
**Posts on this page:** 1\
**Showing post:** 11

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [January 13, 2017, 7:44am UTC](https://discuss.elastic.co/t/ransom-attack-on-elasticsearch-cluster/71310/11 "2017-01-13T07:44:18Z")

</div>

If the cluster is open to the internet and not secured in any way, you can simply read/modify/delete the data through the REST interface. No need for scripts of any kind.

---

_[View the full topic](https://discuss.elastic.co/t/ransom-attack-on-elasticsearch-cluster/71310)._