A major healthcare provider accidentally exposed patient data due to an improperly secured S3 bucket permissions policy.