Catalin Cimpanu reports:
During the past year, there has been a surge in data breach reporting regarding Amazon S3 servers left accessible online, and which were exposing private information from all sorts of companies and their customers.
In almost all cases, the reason was that companies, through their staff, left Amazon S3 “buckets” configured to allow “public” access. This means that anyone with a link to the S3 server could access, view, or download its content.
Read more on BleepingComputer.