Kensium Faces Unverified Claim of 18TB Data Theft Including Source Code and AWS Backups
An anonymous actor has posted a claim dated November 6, 2026, alleging the theft of more than 18 TB of data from Kensium, a Chicago-based provider of e-commerce integration and IT services. The poster states that nearly 170 GB has already been released, with additional material promised in stages. The claimed contents include source code, recent database backups, and personally identifiable information. References to AWS S3 and EC2 appear in the announcement, yet no proof of initial access, compromised credentials, or misconfigurations has been supplied. Kensium specializes in connecting e-commerce platforms with ERP, WMS, and POS systems, making any confirmed exposure potentially valuable for further attacks. Independent verification of the breach remains absent, leaving the scale and authenticity of the data unconfirmed.
ZATAZNov 8, 2026Translated from French