Story perspectives

4TB EY Backup Exposed on Azure: Security Flaw Revealed

10/30/2025

25 5

Summary

Story summary

A 4TB Ernst & Young (EY) SQL Server backup file was publicly accessible on Microsoft Azure due to a configuration error.
Neo Security discovered the exposure and confirmed the unencrypted file contained API keys and user credentials.
The exposure highlights cloud-infrastructure management vulnerabilities, with automated scanning tools able to identify leaks quickly.
Neo Security confirmed ownership via DNS lookups and disclosed the issue to EY, which remediated within a week.

1 of 1

Story summary

A 4TB Ernst & Young (EY) SQL Server backup file was publicly accessible on Microsoft Azure due to a configuration error.
Neo Security discovered the exposure and confirmed the unencrypted file contained API keys and user credentials.
The exposure highlights cloud-infrastructure management vulnerabilities, with automated scanning tools able to identify leaks quickly.
Neo Security confirmed ownership via DNS lookups and disclosed the issue to EY, which remediated within a week.