Amazon.com Inc. has exposed customer names and email addresses in a data breach they are describing as a “technical error.”
The e-commerce giant started emailing customers affected on Tuesday, saying only that the issue has been fixed and that the affected customers did not need to change their passwords.
Amazon confirmed the “technical error” in a statement, confirming that the contents of the emails sent out and shared on social media were accurate but declined to provide any further information such as what the technical error consisted of or how many customers it may have affected.
Amazon’s U.K. office was a little more forthcoming than the head office in Seattle, telling The Register that the issue “wasn’t a breach in the sense of a hack while maintaining that the snafu is an inadvertent technical error.”
The same report noted that the Information Commissioner’s Office, the U.K. office in charge of compliance to the reporting provisions of the EU General Data Protection Regulation, seemed to indicate that it had not been informed of a data breach by Amazon, something that is required under the regulation.
“It is always the company’s responsibility to identify when U.K. citizens have been affected as part of a data breach and take some of the necessary steps to reduce any of the harm to the users or customers the office noted. “The ICO will, moreover soon going to, continue to monitor the situation and cooperate with other supervisory authorities where required.”
Carl Wright, chief executive officer at AttackIQ Inc., told in a report that exposure of any type of customer data is an issue and organizations should always have a plan for continuously assessing the viability of their security controls.”
“For a company that claimed half of all online sales through Black Friday 2017 and amassed over $1 billion in sales, allowing customer emails to be exposed could affect sales, especially when there is a high competitor like the, Best Buy and Walmart and other ecommerce made strong pushes in e-commerce around last year’s Black Friday and Cyber Monday deals,” Wright added.