Hundreds of leaked AWS keys give full control over corporate accounts
More than 9,300 AWS access keys exposed publicly over a four-year period remain active and valid, giving anyone who finds them full control over the corporate cloud accounts they belong to. The keys were accessible between August 2022 and August 2026.
Why this matters: An active AWS key is not a leaked password you can reset and move on from. It can mean full control over cloud storage, databases, internal tools, and any data sitting inside them. The companies affected may not even know these keys are out there. That is the real problem: exposure that has been open for years, still valid, still usable. Every day a leaked key stays active is another day someone else can act as the account owner.
Who should care: Cybersecurity · Privacy officers · Administrators
This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.