Categories: Data Breach

Amazon Terminated Employees for Leaking Customers Sensitive Data Such as Email Address & Phone Number

Amazon fires a number of employees who have leaked customer’s sensitive data such as Email addresses and phone numbers to unauthorized 3rd parties.

Amazon disclosed this data leak to its customers via email and said that the actions committed by employees are a “violation of our policies.”

The company now supporting law enforcement for their prosecution, but there is very small information gathered about to whom they have shared the data.

Amazon didn’t reveal any information about how many customers were affected but the Email said that “No other information related to customer account was shared “

Email that sent to customers about Data Leak

The email read to customers that “This is not a result of anything you have done, and there is no need for you to take any action,”

Amazon spoke person who said via Tech Crunch “We have fixed the issue and informed customers who may have been impacted.” The company emailed all impacted users to be cautious. “

Last year Amazon faced a similar incident in a year back when it sent a message to its customers who had received an email purporting to come from the company including the warning which says that their email addresses and names had been leaked.

Insider threats are very real and make up the majority of cybersecurity attacks on enterprises. Yet, many businesses still spend most of their time safeguarding their systems against outsider threats.

Also Read

5 Steps How To Protect Your Company Infrastructure From Insider Threats

Balaji

BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Recent Posts

Storm-2603 Hackers Exploit SharePoint and Abuse Cloudflare Tunnel to Hide Remote Access

A December intrusion to Storm-2603, the China-based group Microsoft ties to Warlock ransomware. The attackers…

9 minutes ago

OpenSSH sshole Flaw Allows Hackers to Log Into Password-Disabled Linux Accounts Using 257-Character Passwords

A decade-old authentication bypass in OpenSSH on musl-based Linux lets attackers log into accounts that…

12 minutes ago

New GhostMap Android Vulnerability Can Crash Phones Permanently Without Opening an App or Granting Permissions

Bitdefender researchers have revealed a vulnerability called GhostMap that affects Android devices. This vulnerability can…

21 minutes ago

Microsoft Paint Vulnerability Allows Hackers to Execute Malicious Code Remotely Without User Interaction

Microsoft has announced a vulnerability in Windows Paint that could let unauthenticated attackers execute malicious…

45 minutes ago

ARTEX AI Framework Linked to Bank Breaches and Cloud Attacks Found Exposed Across Hundreds of Servers

An autonomous penetration-testing framework linked to South Korean banking breaches and cloud supply-chain attacks is…

1 hour ago

Shopify Makes IP Allowlisting Mandatory for All Public Apps to Prevent Stolen API Token Abuse

Shopify is making IP allowlisting mandatory for all public apps to limit abuse of stolen…

1 hour ago