Share this article on:
Amazon has confirmed that despite threat actor claims that data was scraped and account details were stolen, there was no cyber incident on its systems.
In a post to a popular hacking forum, threat actor “l33tfg” said they had scraped the data of Amazon.com, collecting 53,246 cracked accounts and a data scrape.
“Hello breachforums, today I have data for amazon.com. It contains Usernames, Passwords,1k Contact emails, Full names, Phone numbers, DNS info, IP’s ETC,” the threat actor said.
Within the listing, l33tfg posted a sample containing PHP code, which appears to contain names, email addresses and other data.
When it came to their justification for the incident, l33tfg told a comedic “supervillain origin story”.
“When I was 6 years old my parents ordered me a toy train for christmas from Amazon, except it never arrived, I have been heartbroken and depressed ever since,” the threat actor said.
“I had no reason to live, so f--- you jeff bezos, f--- you and your bald egg shaped head lookin ass, treat your workers better ya filthy c---.”
It doesn’t appear that the threat actor is looking to sell the data or any financial gain, having posted a link to what they claim is the full scrape.
However, speaking with Cyber Daily, Amazon confirmed that there had been no cyber incident and that most of the data was not from Amazon or matched customer information.
“Amazon did not experience a security event, and our systems remain secure,” said Amazon.
“The data referenced in Breach Forums did not come from Amazon, and largely did not even match Amazon customer credentials.
“For the very small percentage of accounts where it did, we took steps to protect those customers.”