Data Management Company Attunity

Summary

Researchers at UpGuard discovered that Israeli data management company Attunity left three Amazon S3 buckets exposed to the internet with no authentication required to view the data. The information contained in these buckets included data from their clients, including Ford, Netflix, and TD Bank, such as backups of employees’ OneDrive accounts, email correspondence, system credentials, private keys for production systems, sales and marketing contact information, project specifications, and employee personal data. The data stores were discovered on May 13, 2019 and secured four days later. Qlik, owner of Attunity, stated they were still investigating the extent of the exposure. More information can be found in the UpGuard article.