“More than 9,300 Amazon Web Services (AWS) access keys publicly exposed between August 2022 and August 2026 are still active and valid.”
Truffle Security found 526 root keys and 242 admin keys still live. The median key is 1,831 days old and only 13.7% have ever been rotated. Hugging Face alone leaked 8,482 of them, which is what happens when you let people push notebooks straight to a public repo. Four years of exposure and 88% still work, so nobody is checking.