• Spice Hoarder@lemmy.zip
    link
    fedilink
    arrow-up
    14
    arrow-down
    4
    ·
    14 hours ago

    No, this was a data leak. The word “hack” has legal implications and shifts the blame away from the company and onto the individual who discovered the leak.

    • JackbyDev@programming.dev
      link
      fedilink
      English
      arrow-up
      6
      ·
      13 hours ago

      It can be both. The company can be at fault for not keeping something secure while the people who steal the data are at fault for stealing data. Data leaks and hacks are not mutually exclusive.

      • percent@infosec.pub
        link
        fedilink
        arrow-up
        1
        ·
        2 hours ago

        I don’t disagree with your main point, but I’m not sure it’s really even “stealing”, as that means to take without permission. In this case, the storage permissions were configured so that the files were publicly available to everyone, so everyone had permission to access them.

        Semantics though. It’s still unethical to access that data, even if it’s not technically stealing.