- What: Nextcloud exposes sensitive data due to misconfiguration
- Impact: Potential exposure of employee and client data
Data Security Nextcloud exposes sensitive data due to hosting misconfiguration July 9, 2026 Share By SC Staff (Adobe Stock) European cloud provider Nextcloud left an unprotected database accessible on the public internet, exposing sensitive internal and client data. The exposed ElasticSearch cluster contained approximately 367,000 records, totaling 8GB of data, including employee information and client contracts, as reported by Tech Radar. The exposed data included employee emails, client company details, contracts, and scripts. Some of the information was unencrypted, making it vulnerable to unauthorized access. Security researchers at Cybernews discovered the misconfiguration in mid-May 2026 and notified Nextcloud, which secured the archive within two days. Nextcloud attributed the incident to a hosting infrastructure misconfiguration, stating that customer servers were unaffected. While Nextcloud found no evidence of unauthorized access, researchers caution that attackers may have accessed the data before it was secured, as automated bots frequently scan the internet for such vulnerabilities. Source: Tech Radar SC Staff Related Encryption Keyfactor secures over $1 billion in funding to expand encryption management SC Staff July 9, 2026 Keyfactor's platform, AgileSec, helps organizations manage and secure their encryption keys and other cryptographic assets like digital certificates. Data Security Accenture confirms security incident after hacker claims source code theft SC Staff July 9, 2026 A threat actor, identified as "888," posted on a cybercrime forum offering the data for sale, alleging it was stolen in July. Data Security New TrojPix technique uses screen pixels to exfiltrate data from air-gapped computers SC Staff July 7, 2026 The TrojPix technique, developed by Shandong University researchers, exploits the video cable to radiate faint radio signals that can be captured by a nearby receiver. Related Events Cybercast Beyond the Hype: The Cybersecurity Trends CISOs are Keeping an Eye on in 2026 On-Demand Event Cybercast Beyond the data perimeter: Why next-generation DSPM is the foundation for modern data security On-Demand Event Virtual Conference Securing the Future of Finance: Strategies to Counter Modern Cyber Threats On-Demand Event Get daily email updates SC Media's daily must-read of the most current and pressing daily news Business Email By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy . Subscribe Related Terms Bit Block Cipher Ciphertext Cryptographic Hash Functions Data Aggregation Data Encryption Standard (DES) Data Loss Prevention (DLP) Digital Envelope Digital Signature Digital Signature Standard (DSS) You can skip this ad in 5 seconds