If this keeps happening weekly, they'll fix it. Maybe there should be a government Agency for Deleting Publicly Exposed Databases that's likely to hit any that you stand up within a week. Also, make having had a publicly exposed database deleted something that is in the public record, and highly prejudicial evidence in civil liability cases.

A Department of Botnet-Suseptible IoT Device Bricking would be useful in the same way.

Didn't Equifax have open customer data back when that attack happened?