2 min read

Amazon Fires Employee For Leaking Customer Data

Graham CLULEY

October 27, 2020

Ad One product to protect all your devices, without slowing them down.
Free 90-day trial
Amazon Fires Employee For Leaking Customer Data
  • Retail giant doesn’t disclose how many customers have been affected
  • Users should be on their guard against fraudulent and phishing emails

Multiple Amazon customers turned to social media to describe how they had received a notification from the online retail giant that their email addresses have been leaked to an unnamed third party.

Emails sent by Amazon to customers admit that a rogue employee unlawfully passed on users’ personal email details to a third-party, violating the company’s rules:

Part of the email reads:

“We are writing to let you know that your e-mail address was disclosed by an Amazon employee to a third-party in violation of our policies. As a result, we have fired the employee, referred them to law enforcement, and are supporting law enforcement criminal prosecution.”

Amazon goes on to explain that no information beyond users’ email addresses was breached, and that it is not asking customers to take any actions in response.

Nonetheless, it’s understandable that Amazon customers who receive the warning might feel alarmed.

If a third-party gained access to some Amazon customers’ email addresses they could be used to send spam, or even to send potentially convincing phishing emails posing as Amazon in an attempt to steal passwords.

Furthermore, a report from Motherboard suggests that the security breach may actually be connected to more than one insider. A statement received by the website from Amazon, referred to the perpetrators in the plural:

“The individuals responsible for this incident have been fired. We have referred the bad actors to law enforcement and are supporting their criminal prosecution.”

Notably, Amazon has made no official statement giving an indication of just how many customer email addresses have been breached, or which department the rogue employee or employees may have worked, or where in the world they might reside.

Of course there are most likely a wide range of job roles within Amazon’s customer service department which might have valid access to customers’ email addresses – and perhaps other sensitive information – as they answer questions and resolve issues related to users’ accounts.

And that makes it all the more important for companies to take an uncompromising stance against workers who exploit their access to customer data by, for instance, selling it to a third party.

Amazon has proven itself willing to punish staff in the past when customer privacy has been violated.

For instance, at the beginning of 2020, the retailer told US senators that it had fired four employees who had accessed videos recorded by customers’ Ring doorbells.

One week later Amazon sent a similar email to that sent in recent days, revealing that it had fired a number of employees after customer email addresses as well as phone numbers were shared with an unnamed third-party without permission.

Sadly there is little individuals can do to prevent a malicious insider from exploiting information that has been shared with an online retailer, but you can take steps to protect yourself from attack by being on the guard for malicious emails pretending to come from a company.

Amazon’s customer service department advises customers to report fraudulent and scam emails they receive that pretend to come from Amazon by sending them – preferably as an attachment – to stop-spoofing@amazon.com

tags


Author



Right now

Top posts

John Oliver Shows the Dark Side of Data Brokerage on Last Week Tonight

John Oliver Shows the Dark Side of Data Brokerage on Last Week Tonight

April 15, 2022

3 min read
Bitdefender Labs Warns of Phishing Scams Targeting MetaMask Users

Bitdefender Labs Warns of Phishing Scams Targeting MetaMask Users

April 14, 2022

3 min read
Why and how to hide your IP address while traveling

Why and how to hide your IP address while traveling

April 13, 2022

2 min read
How Bitdefender Can Help Restore Your Privacy in the Digital Age

How Bitdefender Can Help Restore Your Privacy in the Digital Age

April 04, 2022

3 min read
How Strong is VPN Encryption?

How Strong is VPN Encryption?

February 28, 2022

3 min read
Top Three Ways Internet Users Unknowingly Help Cybercriminals

Top Three Ways Internet Users Unknowingly Help Cybercriminals

February 25, 2022

4 min read

FOLLOW US ON

SOCIAL MEDIA


You might also like

1.8 Million Texans Caught in TDI Data Breach 1.8 Million Texans Caught in TDI Data Breach
Silviu STAHIE

May 20, 2022

1 min read
Your Identity is Being Traded on The Internet Every 2.5 Minutes Your Identity is Being Traded on The Internet Every 2.5 Minutes
Radu CRAHMALIUC

May 20, 2022

3 min read
Malware and PUA Campaigns Abuse Existing Apps, Here’s a Top 10 to Watch Out For Malware and PUA Campaigns Abuse Existing Apps, Here’s a Top 10 to Watch Out For
Silviu STAHIE

May 19, 2022

3 min read