[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fsSgct8f2UldnDWlI5eabQba5VfvdGO8-teLTVNFEAU0":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"status":18,"created_at":19,"published_at":20,"article":21,"tags":25,"podcasts":38},"4383f19f-8c7f-4a56-adff-c80d1280dcbb","cloud-storage-misconfiguration-exposes-client-database","9db73bd4-725b-4674-831f-a9518dfa0950","Cloud Storage Misconfiguration Exposes Client Database","SiS Distribution (Thailand) suffered a data breach where client sub-account information was exposed from their Wasabi cloud storage, affecting hundreds of Thai businesses and government entities. This incident highlights the critical importance of proper cloud storage configuration and access controls, as misconfigurations can expose sensitive customer data to unauthorized parties. The breach demonstrates how a single misconfigured storage bucket can compromise the personal and business information of entire client databases across multiple sectors.","**Immediate actions:**\n- Audit all cloud storage buckets and containers for public access permissions\n- Implement principle of least privilege access controls for cloud resources\n- Enable multi-factor authentication for all cloud storage administrative accounts\n\n**Long-term improvements:**\n- Deploy automated cloud security posture management (CSPM) tools to detect misconfigurations\n- Establish regular access reviews and permission audits for cloud storage systems\n- Create documented cloud configuration standards and baseline security settings\n\n**Detection measures:**\n- Enable cloud storage access logging and monitoring for unusual access patterns\n- Set up alerts for changes to bucket permissions or public access settings",[12,13,14,15,16,17],"CIS Control 3","CIS Control 6","NIST AC-2","NIST AC-3","NIST CM-2","GDPR Article 32","published","2026-04-20T00:08:50.692736+00:00","2026-04-20T00:08:50.602+00:00",{"id":7,"url":22,"slug":23,"title":24},"https:\u002F\u002Fjustpaste.it\u002Fsisthai","sis-distribution-thailand-client-sub-accounts-exported-from-wasabi-8735c0","SiS Distribution (Thailand) Client sub accounts exported from wasabi",[26,32],{"id":27,"name":28,"slug":29,"description":30,"color":31},"1ec88fde-2d0f-4ed8-932a-33f5ccc0fdc7","Access Control","access-control","Excessive privileges, missing MFA, weak auth","#f97316",{"id":33,"name":34,"slug":35,"description":36,"color":37},"859cf0ad-a7e9-42bb-a75d-bac6511fa5d5","Configuration Management","configuration-management","Misconfigs, default credentials, exposed services","#eab308",[]]