Oops, I Leaked It Again — PII in Exposed Amazon RDS Snapshots

Originally published by Mitiga on November 16, 2022.
Written by Ariel Szarf, Doron Karmi, and Lionel Saposnik.
TL; DR:
The Mitiga Research Team recently discovered hundreds of databases being exposed monthly, with extensive Personally Identifiable Information (PII) leakage. Leaking PII in this manner provides a potential treasure trove for threat actors — either during the reconnaissance phase of the cyber kill chain or extortionware/ ransomware campaigns
This blog goes into the tactic…