YAS3BL (Yet Another S3 Bucket Leak)

πŸ”“ Enumerating all the AWS S3 bucket leaks that have been discovered to date.

Company Link Records Exposed Data
Alliance Direct Lending Corporation πŸ”— 1 million Names, addresses, credit scores and partial Social Security numbers
DeepRoot Analytics πŸ”— 200 million 1.1 Terabytes worth of data on registered voters
Dow Jones πŸ”— 2.2 - 4 million Names, addresses, account information, email addresses, and last four digits of credit card numbers of millions of subscribers to Dow Jones publications
ES&S πŸ”— 1.8 million Chicago voter names, addresses, date-of-births, partial SSNs, Driver Licenses, and state ID numbers
Groupize πŸ”— 38,000 Credit Card numbers, expiration dates, CVV codes
Booz Allen Hamilton πŸ”— Undisclosed Top Secret data from DoD, Pentagon, and National Geospatial Intelligence Agency (NGA), SSH keys, credentials granting access to data center Operating System
Mexico's Electoral Authority (INE) πŸ”— 93.4 million Mexican voter registration data
SVR Tracking πŸ”— 540,642 Tracking unit information including usernames, passwords, emails, Vehicle Identification Numbers, license plate numbers, IMEI numbers of GPS devices, specific location where the tracking units were hidden, information on customers and 427 dealerships, 116 GB of hourly backups, 8.5 GB of daily backups from 2017, and 339 log documents
TigerSwan πŸ”— 9,402 Resumes of Top Secret US military veterans names, addresses, phones, emails, Driver License numbers, passport numbers, partial SSNs
Time Warner/BroadSoft πŸ”— 4 million 600 GB worth of data including usernames, emails addresses, MAC addresses, device serial numbers, and financial transaction information
Verizon πŸ”— 100MB Data from internal Verizon Wireless system (DVS), 129 Outlook messages, logs, server names & info, admin usernames & passwords
Verizon πŸ”— 14 million Verizon customer names, addresses, account details, and Personal Identification Numbers (PIN)
Viacom πŸ”— 72 files Encrypted compressed archives containing backup of company's IT infrastructure and private GPG keys used to encrypt the compressed archives
WWE πŸ”— 3,065,805 Fans names, physical addresses, email addresses, earnings, ethnicity, children’s age ranges, birthdates and additional personally identifiable information