Amazon Hit With Major Data Breach Days Before Black Friday

[appalachiablue]

Source: The Guardian

13.25 EDT. Customers’ names and email addresses posted on website, tech giant confirms.

Amazon has suffered a major data breach that caused customer names and email addresses to be disclosed on its website, just two days ahead of Black Friday. The e-commerce giant said it has emailed affected customers but refused to give any more details on how many people were affected or where they are based.

The firm said the issue was not a breach of its website or any of its systems, but a technical issue that inadvertently posted customer names and email addresses to its website. In a short statement, Amazon said: “We have fixed the issue and informed customers who may have been impacted.”

Customers who received the email were told: “Our website inadvertently disclosed your email address or name and email address due to a technical error. The issue has been fixed. This is not a result of anything you have done, and there is no need for you to change your password or take any other action. The impacted customers have been contacted.”

It added: “Amazon takes all security-related matters very seriously and your account security is our top priority. We have policies and security measures in place to ensure that your personal information remains secure.” -MORE...


Read more: https://www.theguardian.com/technology/2018/nov/21/amazon-hit-with-major-data-breach-days-before-black-friday

---

Ho, Ho Whut?!…

[procon]

1. Just got their email... What now?

Hello,
"We’re contacting you to let you know that our website inadvertently disclosed your email address due to a technical error. The issue has been fixed. This is not a result of anything you have done, and there is no need for you to change your password or take any other action. "

[appalachiablue]

2. No idea, and they said NADA. Geesh! What a holiday surprise.

[LakeSuperiorView]

3. Sounds like your email address wound up on a list that could have been seen.

Since it was not associated with the password, or credit card info, it sounds like no big deal. It terms of a "data breach" this sounds rather innocuous.

A data breach on LinkedIn exposed my password on the site and resulted in an email "from myself" to myself containing the password and a bunch of malarkey saying they had taken control of my computer, They wanted $900 deposited to a Bitcoin wallet to ensure not sending info from my system to my contacts. The password was my generic low security password, so it gains them nothing. I changed on every site that I used it.

Sounds like you don't have to do anything, other than keep an eye out for more spam and scams.

[forgotmylogin]

9. I got that email.

"We goofed up, nothing you can do! Sorry for the spam!" #noapology

[marybourg]

4. When I asked to whom my email address

was disclosed, the response was “ to no one “ . My email address “appeared” instead of my name when viewing my account. ???

[Julian Englis]

5. Time to change the password again.... n/t

[mastermind]

6. so, what are they doing with that trillion dollars? nt

[appalachiablue]

7. Will no one think of the poor billionaires this season?

They aren't investing in better account security, alas.

[Crutchez_CuiBono]

8. +1

[dalton99a]

10. Kick