Live data from Hacker News

LexisNexis confirms data breach as hackers leak stolen files

bleepingcomputer.com

1–2 of 2 posts

Re: LexisNexis confirms data breach as hackers leak stolen files

#2
> permitted a single ECS task role "read access to every secret in the account, including the production Redshift master credential."

...

> noting that the stolen information was old and consisted mostly of non-critical details

So I guess 'mostly' is doing a lot of heavy lifting, and they hadn't rotated the credentials in a long time