Confirmed 17 Feb 2026. 141GB data vault exfiltrated from a misconfigured, non-password-protected MongoDB Atlas cloud cluster exposed for ~10 months. Leaked details include consumer incomes, outstanding debts, government identity documents, and residential addresses affecting 797 financial broker groups. OAIC and ACSC notified.