Bottom line: Unsecured AWS access keys can lead to catastrophic data breaches affecting thousands of organizations.
What's happening: A compromised AWS access key was linked to a data breach affecting 1500+ UK charities, including several major organizations, and was first discovered on March 15, 2022.
What to do: Ensure AWS access keys are properly secured using IAM roles and least privilege access, and regularly monitor AWS account activity and review IAM roles to prevent unauthorized access.