Dormant Qubole access let an attacker read customer AWS data Stolen vendor credentials opened old cross-account roles. Check Qubole trust, inspect role sessions and S3 reads, and revoke exposed secrets.