Another Cloud Storage Door Left Open

The state-controlled Colombian energy giant Ecopetrol apparently decided cloud security was optional, allowing intruders to plunder data across fifteen subsidiaries. This brilliant setup exposed three thousand three hundred user accounts to extortionists who are now threatening to leak the loot. Keeping our own names off these ransom notes requires actually locking down cloud storage environments rather than treating them like public fileshares. I suppose we should cheer because they blocked the actual ransomware, but celebrating a half-ruined network is peak modern IT.