Supply chain attack on Qubole customers

Attackers compromised Qubole credentials and exploited dormant vendor access to steal data from dozens of Qubole customers across multiple organizations without directly breaking into any of them. The attack, discovered by Sentra in less than 24 hours, involved reading passwords and keys from customers' cloud environments by assuming trusted Qubole roles that remained active long after companies stopped using the service. The incident highlights the broader risk of forgotten vendor integrations that retain standing access to sensitive data.