Security researchers confirmed late Tuesday that a sophisticated cyberattack targeting a major cloud infrastructure provider has resulted in the exposure of personal data belonging to an estimated thirty million users across forty countries.
The breach, attributed by preliminary forensic analysis to a state-affiliated threat actor, exploited a zero-day vulnerability in widely used authentication middleware that had gone unpatched for several months.
Affected companies have begun notifying customers and regulators as required under data protection laws, while cybersecurity firms are working around the clock to contain the spread.
The incident has renewed calls from lawmakers for mandatory cybersecurity standards for critical digital infrastructure.