Case study · 2026-05-25 CRITICAL Flowise · Weaviate · blood donation data · Germany

A Flowise vector store exposes IT credentials and operational records from a German blood donation organization.

An unauthenticated Weaviate instance at gpt.sergogram.com holds 1,171 objects — internal IT documentation from blutspende.net, a German blood donation organization. Confirmed content: a plaintext server credential (IH-DBSERVER\operator Pw: operator), internal IP ranges, server names, BitLocker PIN conventions, and blood donation unit numbering tables. Flowise runs unauthenticated on both port 3000 and port 443. A second tenant's documents occupy the same instance.

Read the case

Ledger as of 2026-05-17

Rewind today

today−30d−60d−90d180d

36,000

hosts confirmed exposed across all surveys

109

coordinated disclosures sent

cross-cloud surveys published

universities in the disclosure record

countries observed

methodology notes published

Last seven days

2026-05-17 survey

Meow Elasticsearch extortion. Three actors

Three ransomware actors operate the campaign in parallel. The dominant one took $1,800 from five paid victims. The other two have taken nothing. Nepal's Ministry of Health and the Chinese hospital host both fall under minority actors.

2026-05-17 disclosure

Nepal Ministry of Health HMIS disclosure

The TLS cert on 103.69.124.214 names the host as ocl.hmis.gov.np. The Open Concept Lab. 318,114 clinical concepts and a user_profiles admin index. The attacker planted his marker. The data is still alive. Disclosure sent to NP-CERT and the Ministry of Health.

2026-05-17 survey

Cross-stack 24-hour follow-up

22 confirmed AI-stack hosts via dense_vector schema. 92% of yesterday's unauthenticated population already carried a ransom note at first probe. aimap v1.9.8 ships enumElasticsearch + enumClickHouse.

2026-05-16 disclosure

Hospital AI chatbot exposure

One Chinese cloud host runs the full clinical AI stack with no authentication. Ollama with ten models. Open WebUI. A Qdrant vector database with seventy patient-record collections. An Elasticsearch with 270,000 patient-record vectors. A custom Agent API on the operator's paid DeepSeek key.

2026-05-16 survey

Elasticsearch AI-stack population survey

5,037 confirmed unauthenticated Elasticsearch hosts. Spring AI RAG. The NewsBlur OpenAI index. The Chipmong knowledge base. Pimcore CMS. The dms_documentvectors index. The Docker default ships with security disabled.

2026-05-16 survey

ClickHouse population survey

1,832 confirmed unauthenticated ClickHouse hosts. The database names disclose the operator schemas. SigNoz traces. PostHog. Plausible. vllm_service. ai_hedge_fund. The Docker default user has no password.

→ Full ledger, filterable

Globe of findings open remediated

n = 81 sampled · 36,000 confirmed corpus-wide → Open the full map