Amazon employee (now fired) sold my info to 3rd Party

[AFKHero]

Anyone else receive one of these yesterday?  Looks like it is legit from Amazon and would explain the spam train I have been getting the past couple days.  I am attempting to reach out to a CSR for more detailed information but it is slow going so far.  I'll update with more information when available. 

Update:
I went through the Chat CSR help, the original CSR decided quickly this was over their head and connected me with an Account Security CSR via a phone call.
The Account Security CSR (SCSR) he was very polite and nice but not very helpful.  Here are a couple Q&As (I am trying to keep records of all my conversations on this topic)
Was the email legitimate?     Yes
Who was my information provided to?  (SCSR did not have this information)
What actions is Amazon taking?  The incident is under investigation (this is about all the SCSR could tell me)
How many people were affected? (SCSR did not have information on the investigation)
I asked if I would be able to get updates on the incident and what steps Amazon would be taking as the matter is investigated.  The SCSR said he was moving my file to an Account Specialist and I should expect to be contacted by them over the next 24 hours.  I did voice my concern about a large amount of sketchy looking spam emails that began flooding my email over the past few days.  I will keep everyone up to date if the Account Specialist has anything interesting to say.

[Jimkirk363]

I think u need to change the thread header for this one...

 

It states quite clearly Amazon didnt disclose the details, an employee did against their rules.

[AFKHero]

1 minute ago, Jimkirk363 said:

I think u need to change the thread header for this one...

 

It states quite clearly Amazon didnt disclose the details, an employee did against their rules.

That is fair

[Mark Kaine]

1 hour ago, Jimkirk363 said:

I think u need to change the thread header for this one...

 

It states quite clearly Amazon didnt disclose the details, an employee did against their rules.

If you work for a company you automatically represent that company, so it was Amazon who did that, if it's against their own guidelines or not... It's their responsibility. 

[kelvinhall05]

50 minutes ago, Mark Kaine said:

If you work for a company you automatically represent that company, so it was Amazon who did that, if it's against their own guidelines or not... It's their responsibility. 

Lol that's the dumbest thing I've heard here recently. If I worked at a grocery store and murdered someone on my lunch break, do you seriously think that the grocery store should take responsibility for that?

 

 

The Amazon employee made decisions on his own and learned the consequences. This is not Amazon's fault in the slightest; they did the right thing here by firing him and contacting law enforcement.

[Roswell]

4 minutes ago, kelvinhall05 said:

Lol that's the dumbest thing I've heard here recently. If I worked at a grocery store and murdered someone on my lunch break, do you seriously think that the grocery store should take responsibility for that?

 

 

The Amazon employee made decisions on his own and learned the consequences. This is not Amazon's fault in the slightest; they did the right thing here by firing him and contacting law enforcement.

Whether or not you think it's dumb, it's how the legal system works. Amazon is at fault and is responsible for damages caused by employees in almost any scenario.

 

With your logic, literally every decision and outcome is decided by a human at some level and therefore a company should never be held liable for anything they do. You know, since individuals are the ones making decisions, not the company. See how silly that is when applied at scale?

[AFKHero]

1 minute ago, kelvinhall05 said:

Lol that's the dumbest thing I've heard here recently. If I worked at a grocery store and murdered someone on my lunch break, do you seriously think that the grocery store should take responsibility for that?

 

 

The Amazon employee made decisions on his own and learned the consequences. This is not Amazon's fault in the slightest; they did the right thing here by firing him and contacting law enforcement.

I get that this isn't Amazon's fault but they do have some level of responsibility for the protection of customer data.  Something similar to if a UPS driver road rages and hits something with his truck, UPS has a level of responsibility for both the damage caused and the damage/delay to the packages the driver was carrying.  Or if a cook decided to spit in your order at a restaurant, the restaurant has some level of responsibility to the customer.  While in the examples the Company isn't attempting to do something nefarious and it is something out of their control, it was something that was done that violates the trust of the customer.  In my case it violated the Privacy Policy Notice that is promised by Amazon.

[TetraSky]

It's unfortunate, but if it's just the email, at least it is not that bad.

The spam bots got your email now, nothing you can do about it. It is now part of a list that will be sold and resold over and over again on the darkweb.

[IkeaGnome]

12 minutes ago, AFKHero said:

Or if a cook decided to spit in your order at a restaurant, the restaurant has some level of responsibility to the customer.  While in the examples the Company isn't attempting to do something nefarious and it is something out of their control, it was something that was done that violates the trust of the customer.  In my case it violated the Privacy Policy Notice that is promised by Amazon.

Which consists of what Amazon did here. Fire employee, notify authorities. The only difference here is what charges the employee could be getting. Chances are this employee wont be getting assault with a bodily fluid and more likely fraud or some variant for their breaking of the PPN. Let's say I use the mine's credit card to buy a new truck. We buy trucks all the time for out here. I have the authorization to spend company money for the company, but not for me. Is it my fault I did this, or the company for giving me access to something I was thought to be "trustworthy" of? Someone they thought was trustable was in a position to see emails. Turns out they weren't. It looks like they are taking the steps needed, but as far as your edit goes investigations take time. Even as stuff is found by the investigation, there's a chance you won't be able to see all the information you're asking for. Most companies don't disclose much on litigation. Local authorities might also prevent how much they can say.

I feel like you're getting the pitchfork too quickly. What do you want them to do? Give you a new email with everything attached? Pay to get you wiped from those lists(which even if they do won't happen)? At least they are taking action and not giving you a canoe with no paddle. Yes, it's annoying. No, it shouldn't have happened. That's the risk we all take when we sign up for any site. 

[danomicar]

41 minutes ago, kelvinhall05 said:

Lol that's the dumbest thing I've heard here recently. If I worked at a grocery store and murdered someone on my lunch break, do you seriously think that the grocery store should take responsibility for that?

 

 

The Amazon employee made decisions on his own and learned the consequences. This is not Amazon's fault in the slightest; they did the right thing here by firing him and contacting law enforcement.

They used company resources to commit a crime. If you beat someone to death with a shopping cart at your place of work, do you honestly not think the company would take responsibility for this incident happening with on their property?

[AFKHero]

13 minutes ago, Voluspa said:

Which consists of what Amazon did here. Fire employee, notify authorities. The only difference here is what charges the employee could be getting. Chances are this employee wont be getting assault with a bodily fluid and more likely fraud or some variant for their breaking of the PPN. Let's say I use the mine's credit card to buy a new truck. We buy trucks all the time for out here. I have the authorization to spend company money for the company, but not for me. Is it my fault I did this, or the company for giving me access to something I was thought to be "trustworthy" of? Someone they thought was trustable was in a position to see emails. Turns out they weren't. It looks like they are taking the steps needed, but as far as your edit goes investigations take time. Even as stuff is found by the investigation, there's a chance you won't be able to see all the information you're asking for. Most companies don't disclose much on litigation. Local authorities might also prevent how much they can say.

I feel like you're getting the pitchfork too quickly. What do you want them to do? Give you a new email with everything attached? Pay to get you wiped from those lists(which even if they do won't happen)? At least they are taking action and not giving you a canoe with no paddle. Yes, it's annoying. No, it shouldn't have happened. That's the risk we all take when we sign up for any site. 

I am mostly looking for more information from the company. I am annoyed because now I am getting 10-15 phishing emails in my inbox every day.  I'm sure this is happening to other people as well.  I would guess some people don't know any better and are now losing their personal information and ending up with their Identities stolen.  So yeah, annoyance for me, potential major issue other people. It would be nice to get something more than a 'Whoopsie, We apologize, here is some vague information' email from a major company like Amazon.  

[kpluck]

1 hour ago, kelvinhall05 said:

The Amazon employee made decisions on his own and learned the consequences. This is not Amazon's fault in the slightest;

We don't know that. If Amazon doesn't have proper safeguards in place to prevent unauthorized use of customer data then they could very well be at fault. The fact is, without knowing details about how exactly this happened we can't really know for sure.

 

-kp

[Mark Kaine]

1 hour ago, kelvinhall05 said:

Lol that's the dumbest thing I've heard here recently

It's a fact though. Amazon is responsible for what happens with the data costumers give them. You're false analogy doesn't change that, no one was murdered lol. (thankfully!)