Retour 
In this hyperconnected world, where 70% of users continue to work remotely, sharing data in real-time with partners and customers leveraging the flexibility of the cloud is a fundamental aspect for the daily operations of businesses worldwide. In this scenario, the risk of misconfigurations exposing sensitive data continues to be a serious (and frequent) concern. The incidents that have occurred so far are maybe helping to raise awareness, however, that’s not enough, as new organizations in many different sectors are joining this unwelcome list on a regular basis. The shared responsibility model is hard to digest and too many companies are learning this concept the hard way, failing to implement basic security recommendations.
That’s the case of a US medical training school, which exposed the sensitive data of thousands of students via an unsecured AWS S3 bucket, leaking 157 GB of data containing nearly 200,000 files. Identity theft, phishing, and fraud are just a few of the criminal ways this trove of data could be exploited, should it fall in the wrong hands. And there is also the collateral reputational damage for the targeted organization, which is not so collateral, given that the loss of trust corresponds in practice to a loss of customers (more than 50% of the customer base in the worst cases) with devastating consequences especially for small-medium businesses (60% of small companies close within six months after suffering a data breach).
Pretty bad consequences like these can be avoided in a