BEACON CRM CONFIRMS FULL DATABASE THEFT AFTER AWS ACCESS KEY BREACH

Summary from the TLDR InfoSec newsletter

Beacon CRM confirmed an attacker used an AWS access key exposed in public JavaScript. Cost data showed transfers matching all stored records and attachments. With valid credentials, the attackers were able to decrypt protected data during download. Beacon rotated keys, removed client-side secrets, and added endpoint and cloud monitoring.