If you wonder why it's so often elasticsearch that is involved of data breaches here is a possible explanation:
Authentication is a premium feature that you need to buy a license for.
The breached companies are still irresponsible and should have prevented access to those services, still I consider this piece of software an example why security features shouldn't be premium.
@sheogorath it has actually become a free feature by now. The lesson that is history teaches remains true, though.