← Thomson Reuters

2022 Thomson Reuters — misconfigured AWS load-balancer path exposed multi-TB logs and secrets

2022 Unknown records affected Share on X

Data compromised

Platform audit logs, client-interaction traces, and operational secrets per specialist security journalism—categories not normalized to individuals

Technical writeup

Independent research reported in trade press described three internet-reachable databases tied to a Thomson Reuters cloud estate left exposed via an Elastic Load Balancing–related misconfiguration, purportedly netting multiple terabytes of platform logs, authentication flows, and recovered plaintext secrets before remediation. BreachHistory indexes the incident as a classic big-vendor shadow-IT / deployment hygiene failure rather than a finalized regulator victim count.

Root cause

Cloud networking / load-balancer misconfiguration permitting anonymous access to backing data stores

References