PII got breached from the popular cloud infrastructure provider Digital Ocean. The document comprising such sensitive details as names, emails, account data, communication with technical support and sales managers, as well as the sum paid for the service, appeared to be easy to view by anyone.

The document could be read with no authentication required and was allegedly accessed multiple times. The company admits to the mistake and assures that no information misuse is observed.

The incident is another reminder for users to change their passwords regularly, and for companies – to implement two-factor authentication. The number of violations due to human error, negligence or unprotected servers will decrease as soon as companies take security of any type of personally identifiable information seriously.