Pegasus Airlines Leaked 6.5TB of Data in AWS S3 Bucket Mess Up

Pegasus Airlines is a Turkey-based low-cost airline that exposed Electronic Flight Bag (EFB) data to the public including sensitive information such as source code, crew and staff data, and flight…

Breast Cancer Charity Exposed Sensitive Images of U.S. Patients

The Ardmore, Pennsylvania-based cancer charity Breastcancer.org suffered a massive data loss impacting thousands of its registered users. The IT security researchers at SafetyDetectives identified a misconfigured Amazon S3 bucket that…

TeamTNT targeting AWS, Alibaba

Written by Darin Smith Summary TeamTNT modified their scripts after they were made public by security researchers TeamTNT scripts primarily target AWS, but can also run in on-premise, container, or…

Japanese Healthcare Firm ‘Doctors Me’ Exposed Images of 12,000 Patients

In Total Doctors Me left 30GB worth of data exposed to the public due to a misconfigured Amazon S3 bucket. Safety Detectives’ cybersecurity experts uncovered an exposed Amazon S3 bucket…

Market research & conferencing service Civicom exposed 8TB of Data

A New York City-based company known for providing audio, web conferencing, and market research services was found exposing a trove of personal and sensitive data to its clients. The company…

Security giant exposed 3TB of sensitive airport & employees data

The exposed data impacted airports in Colombia, Peru, and probably other countries “or even the rest of the world.” A Sweden-based multinational security and investigation service provider has been found…

Logistics giant D.W. Morgan exposed 100 GB worth of clients’ data

The clients affected by the incident involving a misconfigured Amazon S3 bucket include Global 500 company Ericsson and Fortune 500 company Cisco.  IT security researchers at Website Planet Security Team…

Ghana govt agency exposed 700k citizens’ data in a database mess up

Ghana’s National Service Secretariate – NSS – exposed 55GB worth of citizens’ data when an AWS S3 bucket used by the Secretariate suffered misconfiguration. VPNMentor’s cybersecurity researchers Noam Rotem and…

German audio tech giant Sennheiser exposed 55GB of customers’ data

Sennheiser left personal data of over 28,000 customers exposed on an misconfigured Amazon Web Services (AWS) server. According to a report from vpnMentor, the German audio equipment manufacturer, Sennheiser left…

NPK: Free tool to crack password hashes with AWS

The NPK tool is an open-source password cracking tool developed by the Coalfire Labs Research and Development team. The initials NPK are inspired by the atomic elements contained within farm…