The criminals stored the victims' data, more than 2 TB total, in an open S3 bucket ... Project Discovery's red-teaming software to scan 26.8 million IP addresses belonging to AWS.

The researchers, in a report ... the bucket no longer exists, an attacker would simply need to do what watchTowr did next: Re-register this S3 bucket with the same name inside their AWS account.

SEGA’s disclosure underscores a common, potentially catastrophic, flub — misconfigured Amazon Web Services (AWS ... s account, the report said. The exposed S3 bucket could have also allowed ...