A major U.S. insurance provider confirmed that a cloud storage misconfiguration left 12 million customer records publicly accessible for an estimated 11 days.
Exposed data includes policy details and partial Social Security numbers. The firm has since secured the bucket and begun notifying affected policyholders.