| Wed Nov 21 2018 11:48:14 |
Amazon Appears to Notify Customers of Data Breach
By: Ina Steiner
|
Sponsored Link
|
 Update 11/21/18: Amazon provided us with the following statement. "We have fixed the issue and informed customers who may have been impacted." Note that Amazon's system was not hacked - its website inadvertently disclosed email addresses and names due to a technical error that has since been fixed.
Some Amazon customers say they received an email from the company about a breach of data, according to multiple news outlets today. UK tech publication The Register said readers forwarded emails from Amazon UK informing them that it had "inadvertently disclosed [their] name and email address due to a technical error".
Security expert Brian Krebs said the notification letter was a bit odd: "Besides the brevity, what's giving people pause is they sign the email http://Amazon.com Why cap the "a" and why no https://? Strange."
He speculated this week's notification may be related to a known breach - the Wall Street Journal had reported last month that an Amazon employee had shared certain customer information with third-party sellers. An interesting discussion is taking place on Krebs' tweet. ( See update above.)
Update #2 11/21/18: A reader received one of the email notifications, which had been sent from a no-reply Amazon email. She went to Amazon and created a case to learn more. She said the verification and case number was then sent to an old email address (which has not been used for years for Amazon). "Is Amazon having technical issues," she asked. Here's the text of the email she received from Amazon:
Hello, We're contacting you to let you know that our website inadvertently disclosed your name and email address due to a technical error. The issue has been fixed. This is not a result of anything you have done, and there is no need for you to change your password or take any other action. Sincerely, Customer Service http://Amazon.com |
|
|