LIVE · cybersecurity feed
Live wire
patch

Iranian strikes on AWS facilities left customer data beyond recovery in Bahrain, UAE

Amazon Web Services (AWS) has confirmed the permanent loss of customer data in its Middle East (Bahrain) region, designated me-south-1, and in one availability zone of its Middle East (UAE) region, me-central-1. The announcement, made in two updates on September 15, comes six months after Iranian drone strikes impacted AWS infrastructure in the region.

ZeroDay News ·

Source: Help Net Security

Photo: Ajay Suresh from New York, NY, USA (CC BY 2.0) via Wikimedia Commons

Amazon Web Services (AWS) has confirmed the permanent loss of customer data in its Middle East (Bahrain) region, designated me-south-1, and in one availability zone of its Middle East (UAE) region, me-central-1. The announcement, made in two updates on September 15, comes six months after Iranian drone strikes impacted AWS infrastructure in the region.

For customers in Bahrain, AWS stated it is unable to restore access to resources and data hosted exclusively in the me-south-1 region. The company indicated that the damage in Bahrain affected multiple availability zones and surpassed the capacity of its redundancy measures. AWS has committed to providing a further update for Bahrain in early 2027.

In the UAE, the data loss is confined to a single availability zone, mec1-az2, within the me-central-1 region. AWS reported that it cannot restore access to resources and data stored exclusively in this specific zone. Work is ongoing for the other two availability zones in the UAE, mec1-az1 and mec1-az3, as well as for shared regional infrastructure. AWS expects to provide an update on service restoration in the UAE in the coming months.

The Iranian strikes, which began in early March, were reportedly in retaliation for a joint US-Israeli military campaign against Iran. Gulf states hosting American military bases, including the UAE and Bahrain, became targets.

AWS initially reported that two of its facilities in the UAE were directly struck. In Bahrain, a drone strike in close proximity to one of its facilities caused physical damage to the infrastructure. These initial strikes resulted in structural damage, power disruptions, and in some instances, required fire suppression activities that led to additional water damage.

The situation in Bahrain deteriorated in the weeks following the initial attacks. A second availability zone in the region was disrupted in April, leading to the entire me-south-1 region going offline.

AWS noted that most customers in both affected regions had already relocated their data prior to the losses becoming permanent. This was achieved by utilizing backups where available or by implementing alternative solutions to mitigate the impact of inaccessible data. AWS has also stated it has notified relevant authorities and continues to collaborate with them.

patchcloud
ShareXLinkedInWhatsAppFacebook

More News

view all →
security

Canadian cybersecurity executive arrested in federal extortion case

A Canadian cybersecurity executive was arrested in Pennsylvania on Thursday, facing federal charges of conspiracy to commit extortion. Edward Dubrovsky, 54, a co-founder and former Chief Operating Officer of CYPFER, a firm specializing in ransomware negotiation, is charged with conspiring to threaten the confidentiality of information for extortion and conspiring to commit Hobbs Act extortion,…

breach

Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management

AI SPERA, the company behind the cyber threat intelligence platform Criminal IP, has announced AITEM (AI-Powered Threat Exposure Management), an expansion of its Attack Surface Management (ASM) offerings. AITEM aims to move beyond traditional asset discovery to provide a more comprehensive approach to understanding, prioritizing, and responding to security exposures. The platform is scheduled…

ai

AI Is Getting Really Good at Messing With Cybercriminals

Anti-cybercrime initiatives are increasingly deploying artificial intelligence to disrupt scammers by engaging them with lifelike bots, which the criminals mistake for genuine victims. This strategy aims to waste scammers' time and resources while gathering intelligence on their operations.

ransomware

FBI Arrests Ransomware Negotiation Firm Co-Founder in ShinyHunters Probe

The Federal Bureau of Investigation (FBI) has reportedly arrested Edward Dubrovsky, a co-founder of the ransomware negotiation firm Cypfer and currently associated with CyberSteward. The arrest is said to be part of the ongoing ShinyHunters investigation, specifically in connection with an incident involving FBI job applicant data.

ai

The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn't

A new report highlights a significant blind spot in enterprise security architectures concerning the proliferation of third-party AI agents. The forthcoming 2026 State of Agent Security Report indicates that current security models, often designed to protect AI systems directly chosen and deployed by an organization, frequently fail to account for AI capabilities embedded within third-party…

security

Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison

A former core infrastructure engineer has been sentenced to prison for an attempted cyber extortion plot against an industrial firm. The engineer reportedly deleted administrative accounts and reset hundreds of user passwords, subsequently demanding a ransom of 20 Bitcoin to prevent further disruption to the company's servers.