Amazon S3 Bucket Misconfigurations Trouble Enterprises

## Executive Summary This report details how misconfigured Amazon S3 buckets have been discovered exposing sensitive corporate and personal data (financial records, PII), how threat actors — including less-sophisticated actors — use open-source scanning and forum sales to monetize breaches, and provides countermeasures (least-privilege IAM, encryption, audits, policy monitoring and digital risk protection) to reduce such exposures.