On June 05th Hacked into the MySql database on the Asustor NAS (probably over phpmyadmin that was available publicly), deleted all databases, created a new one with the instruction to send 0.05 BTC:
"To recover your lost Database and avoid leaking it: Send us 0.05 Bitcoin (BTC) to our Bitcoin address 3CsUsdNuWXfpYsQQboxUKeW6xPEvYo9RaY and contact us by Email with your Server IP or Domain name and a Proof of Payment. Your Database is downloaded and backed up on our servers. Backups that we have right now: . If we dont receive your payment in the next 10 Days, we will make your database public or use them otherwise."