Israeli Researchers Uncover Security Flaw in Amazon Athena
Act Security, an Israeli firm, found a security flaw in Amazon Athena that exposed SQL queries, potentially revealing personal and business data.
Jerusalem, 10 September, 2026 (TPS-IL) — Israeli cybersecurity company Act Security found a security flaw in Amazon Athena, a data analysis service operated by US-based Amazon Web Services (AWS).
The flaw allowed one AWS customer to see the text of SQL queries submitted by other customers. The queries could contain personal information, such as email addresses or account numbers, as well as sensitive business information. The data being searched remained protected.
Act found query records from 43 AWS accounts in one test and reported the flaw to Amazon. Amazon fixed the problem in all regions, and no customer action is required.
Act Security was founded in 2025 by four Israelis and has raised $60 million from investors.