Recently, there have been reports of malicious attacks on unsecured instances of MongoDB running openly on the internet. The attacker erased the database and demanded a ransom be paid before restoring it.
Related Articles:
https://www.mongodb.com/blog/post/how-to-avoid-a-malicious-attack-that-ransoms-your-data