Somewhat off topic but this is actually pretty positive proactive approach to security in the finest spirt of due diligence. It should be ok for people to open tickets to look into curious things no matter how trivial. Tickets don’t have to become incidents. This is what triage is for. The real security incident here is how did the intercept learn of that ticket as that should really be classified.
At Amazon you're encouraged (and expected) to escalate early and escalate often. Amazon security did its job very well. >"The real security incident here is how did the intercept learn of that ticket as that should really be classified." Looks like someone from the security or PR departments took a picture of the ticket with their cellphone and sent them to the reporter. Security tickets are immediately encrypted and…
One of the many reasons I’d never want to work there