VPNmentor publicly released the S3 bucket hosted by Amazon. A poorly configured bucket that was removed in January, however, El Regowi said he could access files in a leaky bucket after just a few weeks of removal.

https://www.theregister.co.uk/2020/03/30/security_roundup_280320/