A mid-sized finance firm exposed client data for several weeks due to a cloud storage misconfiguration discovered by independent researchers.
The bucket contained loan documents, personal identifiers, and internal correspondence dating back three years.
The firm has notified affected clients and is offering identity protection services at no cost.
