King Printers: cloud credentials abused for AI calls; investigation finds no customer-data exposure

Between 06:51 and 13:44 on 10 September, an attacker abused infrastructure credentials to make large numbers of AI-service calls from multiple IP addresses. Provider limits stopped the abuse; the compromised credentials and attacker-created credentials were deleted that day. [2]

For safety checks, the site and related functions closed at 18:00 on 10 September and reopened at 16:00 on the 14th. The final 9 November investigation found no access to customer databases, storage or servers, tampering, theft or data transfers to suspicious IPs. Payment data was not held; customer passwords were hashed. Planned measures include temporary infrastructure credentials instead of static ones. [1] [2]