Leaked AWS Keys Expose 768 Cloud Accounts – 88% Still Active

Leaked AWS Keys Reveal Massive Exposure

A security audit by Truffle Security uncovered 768 leaked AWS keys that still grant unfettered access to corporate cloud environments. Among them, ↓ 526 were root credentials, and ↓ 88% of the sampled keys remained functional despite AWS’s quarantine measures.

What the leaked AWS keys mean for enterprises

AWS’s automated quarantine isolates keys flagged as compromised, yet it continues to allow actions such as data exfiltration, instance termination, and credential rotation, leaving a broad attack surface.

‘The quarantine is a band‑aid, not a lock,’ said Truffle’s lead analyst.

The findings echo earlier cloud‑security alerts reported by Reuters and Bloomberg. The episode also revives debate about how pandemic‑era remote work amplified cloud misconfigurations.

Analysis by Kaelen Frost (Lead Cybersecurity Analyst).