Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Amazon admits it exposed customer email addresses, but refuses to give details

techcrunch.com

Post reply on HN
Print view View original

31–40 of 160 posts

Re: Amazon admits it exposed customer email addresses, but refuses to give details

#31

Post by jessaustin »

ganeshkrishnan wrote: post #25
p49k wrote: post #16

Earlier quoted context omitted.

They did not disclose any of the following as specified by the data breach notification requirements of the GDPR: The name and contact details of the data protection officer or other contact point where more information can be obtained The likely consequences of the personal data breach The measures taken or proposed to be taken by the controller to address the personal data breach, including, where appropriate, meas…

I think only Amazon Europe account was leaked. We have account in couple of countries and I got the email only on my UK account.

I live in USA, have only ever used Amazon in USA, and I got the email.

Re: Amazon admits it exposed customer email addresses, but refuses to give details

#33

Post by ganeshkrishnan »

jiveturkey wrote: post #4

based on spam email i have received, that i clearly should not have, i believe this was an exposure to marketplace sellers from whom you have bought a product. I am very careful with my email. i’m not just guessing here. i actually reported it to amazon security. (no answer from them of course.)

No it's the other way around. I am a marketplace seller and I have started receiving phishing links to my unique amazon email account.

Sellers have been exposed not buyers.

Re: Amazon admits it exposed customer email addresses, but refuses to give details

#34

Post by gnulinux »

I don't understand this. In the American startup I'm working we're extremely careful with respectful data practices due to ethics and GDPR (we have a lot European customers). Why doesn't Amazon give a shit about GDPR? Do they have a leverage?

Re: Amazon admits it exposed customer email addresses, but refuses to give details

#35

Post by Paul_S »

ganeshkrishnan wrote: post #33
jiveturkey wrote: post #4

based on spam email i have received, that i clearly should not have, i believe this was an exposure to marketplace sellers from whom you have bought a product. I am very careful with my email. i’m not just guessing here. i actually reported it to amazon security. (no answer from them of course.)

No it's the other way around. I am a marketplace seller and I have started receiving phishing links to my unique amazon email account. Sellers have been exposed not buyers.

I'm not a seller and I got the email.

Re: Amazon admits it exposed customer email addresses, but refuses to give details

#36

Post by paulcole »

edoo wrote: post #12

When I started selling the first gadget I ever made on Amazon I was so excited and was only getting a couple sales a month. If you were one of my customers I looked at your house, judged your grass, found you on LinkedIn and Facebook, Instagram, mortgages, mugshots, everything lol. The sellers also get your full name and address even on fulfilled by Amazon. If you have been on the net long enough this will creep you…

Yeah, when I used to sell on Amazon about 10 years ago, I'd see celebrities' names and phone numbers.

One time Jimmy Kimmel ordered some gimmicky yoga thing and wanted it overnighted to his house along with a gift card. I checked and it was his girlfriend's birthday the next day. I called up offering to gift wrap it at no charge just hoping to talk to him but I ended up getting his assistant. Still offered the gift wrapping which they appreciated.

Re: Amazon admits it exposed customer email addresses, but refuses to give details

#37

Post by iaw »

dylz wrote: post #20
mattferderer wrote: post #10

Earlier quoted context omitted.

Great reason to setup wildcard e-mails so you can do something like amazon@yourdomain.com!

Might not be best idea to use exact word amazon, have gotten this email before - > use of Amazon trademarked words, images, or reviews which may include variations or misspellings and this is a violation of our Trademark Guidelines > [...] > An example of the above violation can be found here: amazon@[mydomain]

I would be surprised if that was enforceable, it sounds more like an effort to ensure they're proactive about their trademark.

Re: Amazon admits it exposed customer email addresses, but refuses to give details

#38

Post by Raphmedia »

ProAm wrote: post #28
ejo4041 wrote: post #15

Earlier quoted context omitted.

I can also confirm, I can still see names and addresses, but not emails. Honestly any online retailer has to be trusted with this information, and in the fulfillment by Amazon (FBA) case, there are 3rd party sellers that have some unnecessary access to it. I personally don't actually need access to it since I do FBA exclusively.

> any online retailer has to be trusted Well that is down right crazy. Most sellers are people in their garages drop shipping 3PL. I'd trust them if they were background checked....maybe

The internet is based on trust.

There is nothing stopping anyone that has an e-commerce website from recording a clear version of your passwords along with all of your billing address and credit card informations.

There's no audits or anything.

Re: Amazon admits it exposed customer email addresses, but refuses to give details

#40

Post by moneil971 »

Every major tech company has had this problem, yet people still keep sharing their personal info (even home address, phone numbers, social security numbers) online. Don't share anything you wouldn't yell out on a crowded street to strangers.
Post reply on HN