Over 9,300 AWS Keys Exposed for Four Years Remain Active

• •Over 9,300 AWS access keys exposed since August 2022 remain active as of August 2026.
• •Affected organizations have not revoked these keys, risking unauthorized access to corporate accounts.
• •The incident underscores the need for improved cybersecurity practices and credential management.

More than 9,300 Amazon Web Services (AWS) access keys have been publicly exposed since August 2022 and remain active as of August 2026. These keys provide full control over corporate accounts, yet the affected organizations have not revoked them. The prolonged exposure poses significant risks, as these credentials could be exploited by malicious actors to gain unauthorized access to sensitive data and systems. The lack of action from organizations to secure their accounts raises concerns about cybersecurity practices and risk management. The incident highlights the importance of regular audits and the revocation of unused or exposed credentials to prevent potential breaches.