Qubole security incident history
Hacking, data breaches and other security incidents involving Qubole, with related coverage.
Incidents: 1 · Most recent
Stolen Qubole credentials used to steal customers' cloud data
Impact: S3 files, secret keys and credentials stolen from several customers; millions of files exfiltrated from one customer
From 14 to 26 October, an attacker exploited stolen Qubole AWS IAM credentials and trust relationships with customer accounts to infiltrate several customers' cloud environments. The attacker stole S3 files, secret keys and credentials associated with AWS, Microsoft Entra ID and Okta, exfiltrating millions of files from one customer. Access permissions remaining at companies that had stopped using the service were also exploited.
Related reports: 9 · last report →