For YouTube Stars, Influencers: More Risk of Hacks after Octoly Breach

Octoly, a Paris-based influencer agency, exposed a production database and creator spreadsheets in a publicly accessible AWS S3 bucket, leaking personally identifiable information for roughly 12,000 influencers (names, addresses, phone numbers, birthdates) and 12,000 bcrypt-hashed passwords. A security researcher discovered the misconfiguration, reported it to Octoly, and the company was slow to remediate or notify affected users, raising risks of account takeover, stalking or physical attacks and possible GDPR non-compliance.