[kenmck]

Yes it looks like somebody a: copied unencrypted backups to S3 and b: set the s3 bucket to be publicly accessible

BIG oops.