Dutch Domain Registrar Openprovider Exposes 164GB of Sensitive Data in Elasticsearch Misconfiguration Dutch domain registrar Openprovider inadvertently exposed nearly 164GB of internal and customer data for three months due to a misconfigured Elasticsearch instance. The breach, discovered by SecurityDiscovery researcher Bob Diachenko and the Cybernews team, put millions of domains at risk by leaking sensitive information, including domain registration details, transfer authentication codes, internal response payloads, and customer actions. The unsecured database also revealed personally identifiable information (PII) such as usernames, addresses, phone numbers, reseller IDs, WHOIS privacy status, and raw domain provisioning records. Cybernews researchers warned that the exposure could have enabled targeted cyberattacks, as unredacted domain records would allow threat actors to identify websites with shared vulnerabilities—potentially leading to widespread exploitation. The Elasticsearch instance has since been secured, but the prolonged exposure underscores the risks of improperly configured cloud databases in the domain registration ecosystem.