Did you make that key public at any time? Its fairly easy to leak keys on github that get picked up by automated bots. AWS is very good about covering charges from account 'hacks'
I wouldn't jump to conclusions on Datadog unless you can verify they only had access to the key.
I wouldn't jump to conclusions on Datadog unless you can verify they only had access to the key.
(Just went through a key leak with AWS)