From reading news sites they were compromised by an Amazon employee, exploiting a bad WAF role.