2
Published signals
currently linked to this company
Company intelligence
Amazon cybersecurity incidents and threat signals
amazon.com
Amazon is a technology company operating in e-commerce, cloud computing, digital media, devices, advertising and artificial intelligence.
1
Last 28 days
recent published signals
1
Last 90 days
recent published signals
2
High or critical
confidence classifications
July 17, 2026
Latest report
most recent published signal
Explore related intelligence
Explore this reporting from another angle
Based on all published signals currently linked to Amazon. Affected countries come from victim data; the company country above remains a separate profile fact. Counts describe this reporting set, not overall incident prevalence.
Confirmed impacts
Company signals
All published signals involving Amazon
AWS Billing Console Glitch Displays Erroneous Trillion-Dollar Charges to Customers
Amazon Web Services (AWS) experienced a billing console glitch that caused customers worldwide to receive erroneous, astronomically high billing estimates, some reaching trillions of dollars. The issue, which began on July 16, 2026, at 7:38 PM PDT (July 17, 2026, 3:38 AM UK time), affected the display of estimated charges and alerts in the AWS Billing and Cost Management Console and Cost Explorer tools, rather than actual charges. AWS acknowledged the bug, disabled the faulty estimation subsystem, and worked on a fix, advising customers not to treat the inflated totals as real charges.
Use of stolen credentials or exploitAmazon Confirms Employee Data Exposed in Third-Party MOVEit Breach
Amazon confirmed that employee data was compromised through a third-party property management vendor due to the lasting impact of the 2023 MOVEit vulnerability. The breach, revealed by a threat actor known as "Nam3L3ss," exposed approximately 2.8 million lines of employee data, including work contact information, email addresses, desk phone numbers, and building locations. The disclosure occurred on November 11, 2024.
FAQ
Questions about Amazon cybersecurity reporting
What does the Amazon page include?
It combines a reviewed organization profile with all current published Shadow Tier signals explicitly linked to Amazon.
Does every mention of Amazon appear here?
No. A signal must contain a reliable company connection and meet the publication criteria; incidental or ambiguous mentions are excluded.
Why can the incident count change?
The page follows current published reporting. Counts change as new evidence is added, classifications are reviewed, or older signals leave the reporting window.