Attackers compromise Twilio's SDK due to misconfigured AWS S3 buckets left the SDK's path publicly readable and writable for roughly five years. Twilio powers communications for over 40,000 businesses and helps developers add voice, video, messaging, and authentication capabilities.
The company's customer list includes Twitter, Netflix, Uber, Shopify, Morgan Stanley, Airbnb, Wix, Spotify, Yelp, Hulu, Intuit, ING, eBay, and countless others.