Carla, a global car rental aggregator, exposed around 48,000 PDF files containing customers’ rental details and personal information due to an unsecured cloud storage bucket. The leak included travel dates and driver data, which attackers could use for targeted scams, spam, or tracking users’ travel patterns. The exposed storage was still receiving new files, suggesting recent customer data was at risk.