MobileRead Forums

MobileRead Forums (https://www.mobileread.com/forums/index.php)
-   News (https://www.mobileread.com/forums/forumdisplay.php?f=78)
-   -   Amazon exposed customer names and emails in a 'technical error' (https://www.mobileread.com/forums/showthread.php?t=312797)

Purple Lady 11-21-2018 03:08 PM

Amazon exposed customer names and emails in a 'technical error'
 
1 Attachment(s)
Has anyone received an email from Amazon telling you that your name and email address was exposed? The email looks suspicious to me. It says no need to change your password and the bottom has a link to Amazon without https and Amazon is capitalized in the link. I didn't get one.

https://www.cnbc.com/2018/11/21/amaz...cal-error.html

Quote:

In a statement, Amazon said, "We have fixed the issue and informed customers who may have been impacted."

Despite the exposure, Amazon told the affected customers they did not need to change their passwords. But even with just their names and emails exposed, people could attempt to reset their accounts or target their emails for phishing attacks.

Amazon did not answer questions about how many customers were affected by the error nor about how long information was exposed. Amazon's website and systems were not breached, an Amazon spokesperson told CNBC. The company did not say where the customer information was visible.


Here's the email: Attachment 167877

theducks 11-21-2018 03:27 PM

Yep!
They don't say ho or where the expose :p happened.

DiapDealer 11-21-2018 05:21 PM

Sounds hinkey. "We exposed your name and email address. There's nothing you should do at this time. Please go to this unsecured URL for more info. Thanks."

ChrisHistorian76 11-21-2018 05:47 PM

Quote:

Originally Posted by DiapDealer (Post 3777211)
Sounds hinkey. "We exposed your name and email address. There's nothing you should do at this time. Please go to this unsecured URL for more info. Thanks."

The email I received looked weird, but it actually appears legit. One, there wasn't a link to click for more information. Two, the email was apparently sent from an Amazon.com email account. Unlike most scams, there isn't anything that obviously indicates it's a scam like the email coming from Amazon.org or another email address that clearly isn't owned by Amazon.

The odd thing about the email I received is that it didn't contain any graphics, like Amazon's logo. I know Outlook didn't strip them out, they weren't there in the first place. That's odd for a corporate mass email.

ChrisHistorian76 11-21-2018 05:50 PM

Quote:

Originally Posted by Purple Lady (Post 3777150)
Has anyone received an email from Amazon telling you that your name and email address was exposed? The email looks suspicious to me. It says no need to change your password and the bottom has a link to Amazon without https and Amazon is capitalized in the link. I didn't get one.

https://www.cnbc.com/2018/11/21/amaz...cal-error.html





Here's the email: Attachment 167877

I got one early this morning (US East coast time.) I was originally really thrown off at this plain looking email. Amazon's logo isn't even in it.

DiapDealer 11-21-2018 07:19 PM

Still seems... off in some way. Has the security breach been mentioned on any of the regular news outlets? I can't see them passing up this opportunity.

Purple Lady 11-21-2018 09:14 PM

Quote:

Originally Posted by DiapDealer (Post 3777257)
Still seems... off in some way. Has the security breach been mentioned on any of the regular news outlets? I can't see them passing up this opportunity.

If you look at the quote from the link to CNBC on the 1st post it says that Amazon did say that they fixed the problem and notified the customers.

Purple Lady 11-21-2018 09:18 PM

Here's all that Google news brought back. It includes wall Street Journal, CBS, and others.

https://news.google.com/stories/CAAq...S&ceid=US%3Aen

DiapDealer 11-21-2018 10:24 PM

If it's real, it's real. *shrug*
I'm just surprised there's not more outrage and calls for Bezos' head from the Amazon's-the-devil society.

Pizza_Cant_Read 11-22-2018 12:24 AM

Quote:

Originally Posted by DiapDealer (Post 3777307)
If it's real, it's real. *shrug*
I'm just surprised there's not more outrage and calls for Bezos' head from the Amazon's-the-devil society.

Eh, school shootings every week and our information being tossed around like candy by everyone with access.

Recently in China, Tencent was given a complete registry of Chinese citizens.. nothing really qualifies as 'shocking' anymore. You can either shrug it off and enjoy the conveniences of modern society, join an activist group knowing that you are fighting a losing battle or... jump? :P

I choose to make the best of it and snag my crumbs where I can.

Pizza_Cant_Read 11-22-2018 12:59 AM

I am not passive but I try not to get angry about things I cannot fix. I like to discuss injustices I observe and the malpractices I perceive... I do it to a fault sometimes even before an idea has coalesced into anything coherent. But so many people are just angry and they want to break things without having any idea of how they will replace or fix them.

OtinG 11-22-2018 10:43 AM

I didn't get the email, at least not yet, but it was a legitimate email according to many news sources. I hate it when companies get tight lipped over these breaches and take days, weeks, and even months to finally let us know how bad the breach was and how many customers got rear-ended.

T-Mobile did that a couple of years ago. It started out being a very limited number of customers who had data breached, but over time that estimate grew steadily and exponentially until the truth was finally admitted and their were millions of us who were effected. They still claim my account wasn't breached, but soon after the breach and continuously until this day I have been getting gillions of unsolicited phone calls all coming with fake caller IDs used by T-Mobile in my area.

The only good thing in this breach is that it involves Amazon, which tends to protect our data. Google and Facebook on the other hand will gladly sell your data to the highest bidder. Too bad we cannot have good old fashioned tar and featherings applied to entire corporations like they used to do to individuals.

Josieb1 11-22-2018 12:48 PM

Quote:

Originally Posted by DiapDealer (Post 3777307)
If it's real, it's real. *shrug*
I'm just surprised there's not more outrage and calls for Bezos' head from the Amazon's-the-devil society.

It’s real, I got the email. I’m in the UK.

Josieb1 11-22-2018 12:48 PM

Quote:

Originally Posted by DiapDealer (Post 3777211)
Sounds hinkey. "We exposed your name and email address. There's nothing you should do at this time. Please go to this unsecured URL for more info. Thanks."

It’s genuine

j.p.s 11-22-2018 01:11 PM

Quote:

Originally Posted by Josieb1 (Post 3777566)
It’s real, I got the email. I’m in the UK.

Quote:

Originally Posted by Josieb1 (Post 3777567)
It’s genuine

But it looks really bad. Sort of like the IRS or Her Majesty's Revenue and Customs actually started sending legal notices by e-mail and worded them like a Nigerian prince scam.


All times are GMT -4. The time now is 09:49 PM.

Powered by: vBulletin
Copyright ©2000 - 3.8.5, Jelsoft Enterprises Ltd.
MobileRead.com is a privately owned, operated and funded community.