@rysiek there is absolutely zero reason to store insecure, unencrypted, information in a bucket, s3 or otherwise.
Corporations/Institutions need to start being held accountable when PII is leaked due to shoddy and insufficient security practices are being implemented
If they can't secure their data infrastructure, then they shouldn't be asking for such sensitive information.