vice.com/en_us/article/…
- the tool and its reports and files were left exposed on a domain called that was not obviously owned by Amazon & doesn't use Amazon infrastructure. Despite this, there are clear and direct ties back to Amazon w/in the files
- metadata of files ties to current Amazon employees in India and Seattle
- links in the reports are internal Amazon links
- the names of dozens of corporate employees are listed in the reports, which we cross referenced
Here is what we learned:
vice.com/en_us/article/…