Cybersecurity incident
Date: 2020-07-22 00:00:00
Affected organization: Twilio
Affected country: United States of America
Industry: Professional, Scientific, and Technical Services
Event type: Exploitive
Event subtype: Exploitation of End Hosts
Motive: Financial
Actor: Undetermined
Actor type: Criminal
Actor country: Undetermined
Description: Twilio discloses that its TaskRouter JS SDK was compromised by attackers after they gained access to one of its misconfigured Amazon AWS S3 buckets which left the SDK's path publicly readable and writable for roughly five years, since 2015.