If you wonder why it's so often elasticsearch that is involved of data breaches here is a possible explanation:

Authentication is a premium feature that you need to buy a license for.

The breached companies are still irresponsible and should have prevented access to those services, still I consider this piece of software an example why security features shouldn't be premium.