Security researchers discovered that hotel booking service Groupize allegedly exposed sensitive data contained in unsecured AWS storage bucket. The exposed data included nearly 3,000 documents detailing contracts or agreements between hotels, customers and Groupize, including credit cards payment authorization forms. No logins or passwords were required to access the data. In a single random sampling there was a total of $12.6 million in just one spreadsheet. Other AWS S3 leaks include Verizon repository that leaked 14 million customer records and an open bucket belonging voting machine supplier ES&S.”]
Source: https://securityaffairs.co/wordpress/62262/data-breach/groupize-data-leak.html