Get all your news in one place.
100's of premium titles.
One app.
Start reading
Tom’s Guide
Tom’s Guide
Technology
Anthony Spadafora

5 million Americans just had their credit card details leaked online — what to do now

A picture showing different credit cards stacked on top of each other on a table.

Not all of the personal and financial information that ends up online is the result of a data breach carried out by hackers. Instead, there are also data leaks where sensitive info is exposed as a result of negligence when a database is left unsecured without a password.

As discovered by the security team at LEAKD, 5 million U.S. credit card details and other sensitive data was found in an AWS S3 bucket that could have been accessed by anyone online. Just like with the best cloud storage, an S3 bucket is a virtual file folder stored in the cloud that’s often used by businesses to store customer data.

While we currently don’t know who was behind this leak, from the screenshots seen by LEAKD, it appears to have come from a phishing operation. Normally, this stolen data would be for hackers only but by forgetting to protect it with a password, anyone with the necessary know-how could have accessed this information.

Here’s everything you need to know about this major data leak along with the steps you should take to secure your digital life if you believe that your credit card details and other personal data might have been compromised.

Sign up to read this article
Read news from 100's of titles, curated specifically for you.
Already a member? Sign in here
Related Stories
Top stories on inkl right now
One subscription that gives you access to news from hundreds of sites
Already a member? Sign in here
Our Picks
Fourteen days free
Download the app
One app. One membership.
100+ trusted global sources.