Amazon confirms employee data breach after vendor hack

Amazon confirmed that employee contact information was leaked after data allegedly stolen during the May 2023 MOVEit attacks was posted by threat actor "Nam3L3ss"; the incident appears tied to a zero-day vulnerability in the MOVEit Transfer platform exploited during a wider Clop-led data-theft campaign that impacted at least 25 organizations and exposed tens of millions of records. The leaked information reportedly came from a compromised third-party vendor and included names, emails, phone numbers, and building locations, while Amazon maintains its core systems were not breached.