Amazon data breach overview:
- Who: Amazon has reportedly confirmed that employee data allegedly compromised during the MOVEit file transfer system data breach in May 2023 has been leaked on a hacking forum.
- Why: Amazon confirmed the leak after a threat actor called Nam3L3ss published more than 2.8 million lines of Amazon employee data on the hacking forum.
- Where: The MOVEit data breach affected companies in the U.S. and internationally.
Amazon has reportedly confirmed that employee data allegedly compromised during the May 2023 MOVEit file transfer system data breach has been leaked on a hacking forum.
The tech giant’s confirmation came after a threat actor known as Nam3L3ss published more than 2.8 million lines of Amazon employee data, including names, email addresses, contact info and building locations, among other things, reports BleepingComputer.
An Amazon spokesperson reportedly confirmed the Amazon data breach and said the stolen data came from a third-party service provider’s systems.
The spokesperson further said both its Amazon and Amazon Web Services (AWS) systems are secure and had not experienced a “security event,” reports BleepingComputer.
“Amazon and AWS systems remain secure, and we have not experienced a security event. We were notified about a security event at one of our property management vendors that impacted several of its customers including Amazon,” Amazon spokesperson Adam Montgomery said, as reported by BleepingComputer.
Breached Amazon vendor only had access to employee contact info, Amazon says
Amazon reportedly said the vendor who was breached only had access to Amazon employee contact info and that no sensitive information such as Social Security numbers, financial info or government identification had been compromised.
The company also said the vendor who fell victim to the data breach has since fixed the security vulnerability that enabled the data breach, reports BleepingComputer.
Nam3L3ss reportedly also leaked data belonging to 25 other companies, including Lenovo, HP, City National Bank, Westinghouse, Schwab and Delta, among others.
Russian hacking group CL0P took responsibility for the MOVEit data breach, which, in addition to companies, affected a number of organizations and federal agencies in the U.S. and allies abroad.
In other recent data breach news, Fidelity Investments confirmed in October that it suffered an August data breach the multinational financial services corporation said exposed the personal information of more than 77,000 of its customers.
Are you affected by the Amazon data breach? Let us know in the comments.
Read About More Class Action Lawsuits & Class Action Settlements: