Joomla says a team member left an unencrypted backup of the JRD portal on a private AWS S3 bucket.