Amazon confirms employee data breach, but says it’s limited to contact info

Amazon says a information breach exposed the email addresses, telephone numbers, and gathering locations linked to its employees, as reported earlier by 404 Media. In a connection to The Verge, Amazon spokesperson Adam Montgomery said the institution was “notified astir a information lawsuit astatine 1 of our spot absorption vendors that impacted respective of its customers, including Amazon.”

The confirmation follows a study from the cybercrime steadfast Hudson Rock saying that accusation posted connected the hacking forum includes information from Amazon and 25 different entities, including MetLife, HP, HSBC, and Canada Post.

Hudson Rock says the leaked info dates backmost to May 2023, and it’s related to the large information vulnerability successful the MOVEit record transportation strategy that came to airy past year, adding Amazon to a database of affected organizations that already included the BBC, British Airways, Sony, the US Department of Energy, and galore others. They besides enactment that the idiosyncratic who posted the accusation claimed it’s “just a tiny information of the information they have.”

“Amazon and AWS systems stay secure, and we person not experienced a information event,” Montgomery said. “The lone Amazon accusation progressive was worker enactment interaction information, for illustration enactment email addresses, table telephone numbers, and gathering locations.”

It’s unclear however galore employees were affected by the breach, but a screenshot of the hacking forum station shows much than 2.8 cardinal lines successful the purported Amazon dataset. Montgomery told The Verge that the breach didn’t impact worker societal information numbers, authorities individuality documents, oregon fiscal data.