An AWS-hosted database was configured with no username or password required for access to personal data.

from Dark Reading: https://ubm.io/2Huqg2z
via IFTTT