Oops, I Leaked It Again — PII in Exposed Amazon RDS Snapshots

Originally published by Mitiga on November 16, 2022.
Written by Ariel Szarf, Doron Karmi, and Lionel Saposnik.
TL; DR:
The Mitiga Research Team recently discovered hundreds of databases being exposed monthly, with extensive Personally Identifiable Information (PII) leakage. Leaking PII in this manner provides a potential treasure trove for threat actors — either during the reconnaissance phase of the cyber kill chain or extortionware/ ransomware campaigns
This blog goes into the tactic...

amazon amazon rds blog campaigns cyber cyber kill chain databases exposed information kill kill chain leaked mitiga november personally identifiable information pii ransomware rds reconnaissance research snapshots team threat threat actors