FlexBooker, a United States cloud-based appointment scheduling service, recently disclosed a data breach impacting over 3.7 million individuals. This breach occurred after the threat actors responsible compromised one (1) of FlexBooker’s Amazon Web Services (AWS) accounts. The actors, dubbed “Uawrongteam”, claimed to have stolen approximately 9.5 million records from the AWS infrastructure and “shared links to archives and files with sensitive information, such as photos, driver’s licenses, and other IDs”. FlexBooker confirmed the attack and data breach in a data breach notification sent to those impacted, and also stated that the actors did not access credit card or payment information during the incident. However, Troy Hunt, an Australian security researcher that operates HaveIBeenPwned, detailed that the compromised data contains “real names, email addresses, phone numbers, and for a small number of accounts, password hashes and partial credit card information”. This data has also been leaked in a common hacking forum this week. CTIX analysts will monitor the fallout of this breach and provide updates as more details about the exfiltrated data are made public.