Amazon confirms worker knowledge breach, however says it’s restricted to contact data

Amazon says an information breach uncovered the e-mail addresses, telephone numbers, and constructing places linked to its staff, as reported earlier by 404 Media. In a press release to The Verge, Amazon spokesperson Adam Montgomery mentioned the corporate was “notified a couple of safety occasion at one in every of our property administration distributors that impacted a number of of its prospects, together with Amazon.”

Hudson Rock says the leaked data dates again to Could 2023, and it’s associated to the foremost safety vulnerability within the MOVEit file switch system that got here to gentle final 12 months, including Amazon to a listing of affected organizations that already included the BBC, British Airways, Sony, the US Division of Power, and lots of others. In addition they notice that the one that posted the knowledge claimed it’s “only a tiny portion of the info they’ve.”

“Amazon and AWS programs stay safe, and now we have not skilled a safety occasion,” Montgomery mentioned. “The one Amazon info concerned was worker work contact info, for instance work electronic mail addresses, desk telephone numbers, and constructing places.”

It’s unclear what number of staff have been affected by the breach, however a screenshot of the hacking discussion board publish exhibits greater than 2.8 million traces within the purported Amazon dataset. Montgomery advised The Verge that the breach didn’t contain worker social safety numbers, authorities identification paperwork, or monetary knowledge.