The stolen data was noted by cybercrime intelligence company Hudson Rock, which detailed that it was related to CVE-2023-34362, a critical vulnerability discovered mid-2023 in file transfer software MOVEit. The CVE allowed hackers to bypass authentication to access the data.

Amazon has confirmed that employee data was compromised after a “security event” at a third-party vendor. In a statement given to TechCrunch on Monday,

Amazon confirmed a data breach via a third-party vendor tied to the MOVEit hack, compromising employee contact information and highlighting risks associated with third-party vulnerabilities.

An individual who posted data allegedly stolen via MOVEit from Amazon and other big-name firms claims not to be malicious

Employee locations, email addresses and phone numbers have been leaked, Amazon has admitted as it becomes latest MOVEit attack victim

Employee data stolen via the MOVEit transfer leak from large companies such as Amazon, HP, HSBC and others is for sale in the digital underground.

Amazon confirmed a data breach involving employee information after data allegedly stolen during the May 2023 MOVEit attacks was leaked on a hacking forum.

The MOVEit Transfer cyberattack that swept the world across the second half of 2023 is apparently continuing to wreak havoc, with Amazon confirming some of its employee details have been leaked via a breach in a third-party provider.

A hacker leaks information from Amazon and several other companies and says the data was compromised via last year's vulnerability in the MOVEIt file transfer platform.