Hackers Exploit Qubole's Trusted AWS Access to Breach Customer Accounts and Steal Data

An attacker gained access to the AWS accounts of multiple Qubole customers and stole sensitive information between October 14 and October 26. The breach occurred when the attacker used credentials for a trusted AWS account that Qubole's platform uses to access customer accounts. The method by which the attacker obtained these credentials is currently unknown. Qubole, a data lake platform, was the point of vulnerability that the attacker exploited to reach the customer accounts. The breach was reported by cloud security company Wiz. Qubole is owned by Idera.