Re: AWS and the Cloud Services Learning Curve
I don't see there was a breach in this case either. It rather shows how important it is to configure properly, and most of all it's a clear example of what any security expert recommends: Always encrypt your data. Encryption is what determines how secure the data will be in the cloud.
A cloud service provider is responsible for the cloud infrastructure security. But it's the responsibility of the cloud users to encrypt, protect, and secure their data. There is not too much science in that.
So, the person who obtained the copy of the data had no idea about the basics of cloud storage when dealing with sensitive data.
But, I believe the most important thing to question here is how and why the Mexican government allows anyone to have a copy of such data. This is not clear to me.
How can a citizen trust a government that makes it so easy for anyone to access the information of every single citizen? I believe that's the main issue here. Otherwise, this would have never happened.