REDCap on the Internet: An Exposure Analysis

Censys observed approximately 8,500 REDCap instances globally, with version 16.0.17 representing roughly a third of deployments. The analysis follows a PRC-attributed campaign exploiting externally facing REDCap servers for extended data exfiltration.