[hkothari]

The craziest part to me:

"As a result of the failures described in Paragraph 18, on or about May 12, 2014, an intruder was able to access consumers’ personal information in plain text in Respondent’s Amazon S3 Datastore using an access key that one of Respondent’s engineers had publicly posted to GitHub, a code-sharing website used by software developers. The publicly posted key granted full administrative privileges to all data and documents stored within Respondent’s Amazon S3 Datastore."

https://www.ftc.gov/system/files/documents/cases/1523054_ube... Page 5