A mis-configured Amazon Web Storage (AWS) instance has once again exposed millions of private customer records to the public Internet. One file alone contained more than 4 million records featuring, “user names, Mac addresses, serial numbers, account numbers, service, category details and transaction ID” Unite communications provider BroadSoft’s vulnerability is just the latest in a series of private data disasters stemming from mis-Configured Amazon S3 buckets. Amazon has pointed out that the default setting for AWS S3 storage is for the bucket to be private.”]
Source: https://www.darkreading.com/cloud-security/broadsoft-error-exposes-twc-pii-on-aws-s3/a/d-id/736071