It has already happened in the past. Repeatedly. There's news coverage about this at least once a year. And it doesn't require using Shodan as there are plenty

It has already happened in the past. Repeatedly. There's news coverage about this at least once a year. And it doesn't require using Shodan as there are plenty of open-source tools for scanning the Internet nowadays. For example, this was from the same news website a few years ago: https://www.bleepingcomputer.com/news/security/massive-wave-of-mongodb-ransom-attacks-makes-26-000-new-victims/ https://www.bleepingcomputer.com/news/security/massive-wave-... I've also written about it many times: https://blog.shodan.io/its-the-data-stupid/ https://blog.shodan.io/its-the-data-stupid/ https://blog.shodan.io/its-still-the-data-stupid/ https://blog.shodan.io/its-still-the-data-stupid/ https://blog.shodan.io/the-hdfs-juggernaut/ https://blog.shodan.io/the-hdfs-juggernaut/ https://blog.shodan.io/elastic-data-exposure-grows-to-3-2-pb/ https://blog.shodan.io/elastic-data-exposure-grows-to-3-2-pb...