An unsecured AWS storage bucket belonging to car rental aggregator Carla exposed hundreds of new booking documents daily, containing complete driver identities, travel dates, and vehicle details to potential attackers.