- Cybernews found Carla’s exposed AWS bucket with 48,000 PDFs containing customer rental data
- Files included names, emails, phone numbers, rental details, and travel patterns useful for phishing
- Carla secured the database after disclosure; no evidence of malicious access, but risk remains
Car rental comparison and booking platform Carla kept a database with sensitive customer information unlocked on the open internet, freely available to anyone who knew where to look.
