AWS customers hit by major cyberattack which then stored stolen credentials in plain sight

Many sites were misconfigured, allowing hackers to exfiltrate sensitive data and sell it on the dark web.