Attacker uses Qubole AWS access to breach customer cloud accounts

An attacker breached Amazon Web Services accounts belonging to multiple Qubole customers between October 14 and October 26, according to cloud security company Wiz. The Hacker News and news.lavx.hu both reported that the intrusion allowed the attacker to steal stored secrets and customer data. [1][8]

The Hacker News reported that the attacker compromised the targets by using credentials for an AWS account that Qubole uses to connect to its platform customers. By accessing this trusted account, the attacker obtained direct entry into the environments of multiple client accounts. [1]

Other organizations have suffered distinct security incidents, according to separate reports. Homeland411 reported that a vendor attack on Arara exposed 2.19 million SEGA customer emails. SecurityWeek reported that a cyberattack on online retailer Revolve impacted over 1.5 million individuals, while a separate breach at Amplifon Americas exposed the personal, health, and insurance records of 1.3 million people. [3][5][7]

The incident follows previous retail and supply chain security compromises. As FTMQ Security reported earlier, online fashion retailer ASOS confirmed a data breach on October 6 after an attacker social engineered an employee to steal credentials, though payment details and passwords remained secure. [11]