Amazon confirmed an ongoing investigation of the allegations that some of its personnel sold confidential customer data to third party companies.

Amazon confirmed that it is investigating allegations that its staff sold customer data and other confidential information to third-party firms, particularly in China, a practice that violated the company policy. The news was first reported by the Wall Street Journal, which discovered that the company staff sells customers data to merchants that are Amazon sellers. “Employees of Amazon, primarily with the aid of intermediaries, are offering internal data and other confidential information that can give an edge to independent merchants selling their products on the site, according to sellers who have been offered and purchased the data, as well as brokers who provide it and people familiar with internal investigations.” reads the report published by the WSJ. On Amazon, customers can buy products sold directly by the company along with goods from many other merchants. The Wall Street Journal said cited the cases of intermediaries in Shenzhen working for group employees and selling information on sales volumes for payments ranging from 80 to more than 2,000 dollars.

“[Amazon is] conducting a thorough investigation of these claims.” Amazon spokesperson told AFP. “We have zero tolerance for abuse of our systems and if we find bad actors who have engaged in this behavior, we will take swift action against them, including terminating their selling accounts, deleting reviews, withholding funds, and taking legal action,” the statement said.

https://securityaffairs.co/wordpress/76293/hacking/amazon-investigates-data-leak.html