Amazon confirms employee data breach after vendor hack 11-13-2024, 09:24 PM
#1
Amazon confirmed a data breach involving employee information after data allegedly stolen during the May 2023 MOVEit attacks was leaked on a hacking forum.
The threat actor behind this data leak, known as Nam3L3ss, published over 2.8 million lines of Amazon employee data, including names, contact information, building locations, email addresses, and more.
Amazon spokesperson Adam Montgomery confirmed Nam3L3ss' claims, adding that this data was stolen from systems belonging to a third-party service provider.
"Amazon and AWS systems remain secure, and we have not experienced a security event. We were notified about a security event at one of our property management vendors that impacted several of its customers including Amazon," Montgomery said.
"The only Amazon information involved was employee work contact information, for example work email addresses, desk phone numbers, and building locations."
The company said the breached vendor only had access to employee contact information, and the attackers didn't access or steal sensitive employee information like Social Security numbers, government identification, or financial information. Amazon added that the vendor has since patched the security vulnerability used in the attack.
Amazon employee data for sale
Amazon employee data for sale (BleepingComputer)
Nam3L3ss has also leaked the data from twenty-five other companies. However, they say some of the data was obtained from other sources, including ransom gangs' leak sites and exposed AWS and Azure buckers.
"I download entire databases from exposed web sources including mysql, postgres, SQL Server databases and backups, azure databases and backups etc and then convert them to csv or other format," they said.
"DO NOT ask me for access to my storage etc, at present I have well over 250TB of archived database files etc."
The list of companies whose data was stolen in MOVEit attacks or harvested from Internet-exposed resources and has now been leaked on the hacking forum includes Lenovo, HP, TIAA, Schwab, HSBC, Delta, McDonald's, and Metlife, among others (as shown in the table below).
BleepingComputer has contacted multiple companies and will update this article when additional information is available.
https://www.bleepingcomputer.com/news/se...ndor-hack/
The threat actor behind this data leak, known as Nam3L3ss, published over 2.8 million lines of Amazon employee data, including names, contact information, building locations, email addresses, and more.
Amazon spokesperson Adam Montgomery confirmed Nam3L3ss' claims, adding that this data was stolen from systems belonging to a third-party service provider.
"Amazon and AWS systems remain secure, and we have not experienced a security event. We were notified about a security event at one of our property management vendors that impacted several of its customers including Amazon," Montgomery said.
"The only Amazon information involved was employee work contact information, for example work email addresses, desk phone numbers, and building locations."
The company said the breached vendor only had access to employee contact information, and the attackers didn't access or steal sensitive employee information like Social Security numbers, government identification, or financial information. Amazon added that the vendor has since patched the security vulnerability used in the attack.
Amazon employee data for sale
Amazon employee data for sale (BleepingComputer)
Nam3L3ss has also leaked the data from twenty-five other companies. However, they say some of the data was obtained from other sources, including ransom gangs' leak sites and exposed AWS and Azure buckers.
"I download entire databases from exposed web sources including mysql, postgres, SQL Server databases and backups, azure databases and backups etc and then convert them to csv or other format," they said.
"DO NOT ask me for access to my storage etc, at present I have well over 250TB of archived database files etc."
The list of companies whose data was stolen in MOVEit attacks or harvested from Internet-exposed resources and has now been leaked on the hacking forum includes Lenovo, HP, TIAA, Schwab, HSBC, Delta, McDonald's, and Metlife, among others (as shown in the table below).
BleepingComputer has contacted multiple companies and will update this article when additional information is available.
https://www.bleepingcomputer.com/news/se...ndor-hack/
![[Image: MoxYchq.png]](https://i.imgur.com/MoxYchq.png)
![[+]](https://sinister.ly/images/modern/collapse_collapsed.png)