CyberReportedHighDevelopingFeatured

Qubole IAM Credentials Compromised in Supply Chain Attack on Dozen+ Orgs

Attackers used compromised Qubole IAM credentials to exfiltrate customer files, secrets, keys, environment variables, and credentials, affecting over a dozen organizations. The scope of data theft and the identity of the threat actor remain unclear. This highlights the cascading risk of third-party access in cloud data platforms.

AI disclosure: Model-written summary of the source, not a verified fact. Check the sources. How Mosaic works

SecurityWeekabout 8 hours agoUSengCredibility 26%View source

Score Breakdown

Mosaic Score6.7

Model confidence0.5

Significance0.8

Source credibility0.3

Intelligence Tags

#supply-chain #iam #credentials #data-breach #cloud-security

Entities

United StatescountrySupply Chainconcept

Source

Part of 2 situations

activePoliticsJustice2m ago

United States — 332 developments

→ stable·103 signals·US, BO, GBScore 4.9

developingCyber1h ago

Qubole IAM Credential Compromise Leads to AWS Customer Data Exfiltration

A threat actor leveraged compromised Qubole IAM credentials to access and exfiltrate data from multiple customer AWS environments. This constitutes a supply chain attack exploiting trusted access relationships, with over a dozen organizations reportedly affected. The full scope of compromised data and affected entities remains unclear.

→ stable·↑2 signals·USScore 4.7