{
  "id": 19783587,
  "title": "I hid fake patient records in S3, then tried to leak them. Here's what AWS caught.",
  "url": "https://urgent.news/2026/11/13/i-hid-fake-patient-records-in-s3-then-tried-to-leak-them-heres-what",
  "topic": "health",
  "section": "Health & Medicine",
  "published": "2026-11-13T09:09:15.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/yashrajshrestha/i-hid-fake-patient-records-in-s3-then-tried-to-leak-them-heres-what-aws-caught-4ioi"
  },
  "original_language": "en",
  "account": "In a cloud environment, sensitive patient data can be found and managed using Amazon Macie. This security tool scans files within S3 buckets for any PHI (Protected Health Information) and identifies whether the buckets are public, encrypted, or shared. The objective is to detect and prevent breaches before they occur. In a demonstration, a private bucket was created with Block Public Access enabled and default SSE-S3 encryption. Four synthetic files were uploaded, containing fake patient records including names, dates of birth, SSN-format numbers, Medicare-format IDs, addresses, phone numbers, and diagnoses. The generator added extra details like fake addresses, phone numbers, and medical conditions for realism. Amazon Macie was then activated in the console, creating a role to access the buckets. A one-time job was set up to scan the bucket, taking approximately 10 minutes to complete. The first findings were displayed within 4 minutes, flagging the four files as containing sensitive data.",
  "summary": "Originally published on AWS Builder Center . A hands-on look at finding sensitive data in S3 before it becomes a breach. Then I built a five-layer safety net around it and tried to break it. 100% fake data. Why I tried this 2026 has been another heavy year for US health data. Two of the biggest incidents: DentaQuest (dental and vision benefits) — about 15 million people notified after a…",
  "key_points": [
    "AWS security tool Amazon Macie scans S3 buckets for PHI.",
    "Four synthetic files with fake patient records uploaded to private bucket.",
    "Amazon Macie detects and flags the four files as containing sensitive data."
  ],
  "editors_take": "Automated scanning tools like Amazon Macie transform reactive security into proactive defense by identifying sensitive information within cloud storage before accidental exposure or malicious leaks can occur.",
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}