Description: A security flaw in Ring’s Neighbors app exposed the precise locations and home addresses of users who had posted to the app. It included the videos taken by Ring doorbells and security cameras and the bug made it possible to retrieve the location data of users who posted to the app. The bug retrieved the hidden data, including the user’s latitude and longitude and their home address, from Ring’s servers. The hackers also created tools to break into Ring accounts and over 1,500 user account passwords were found on the dark web.

Description: Whole Foods Market chain Whole Foods Market Suffered Payment Card Breach. The security breach report states that thieves were able to obtain credit card details of patrons who made transactions at specific locations, such as full-service restaurants and taprooms inside some stores, without authorization. Whole Foods Market was notified of an incident in which payment card information used at select establishments like full-service restaurants and taprooms located within some locations was improperly accessed. The locations and total number of consumers affected by the attack remain unknown, as the company has not released any information about it.

Description: webXray, a tool designed to expose privacy violations on the internet, reveals how tech giants like Google and various websites track user data and browsing habits. Developed by former Google engineer Tim Libert, webXray analyzes web activity to identify which sites collect data, including sensitive information. Such tracking, often without clear user consent, can breach laws like HIPAA and GDPR, posing serious threats to individuals' privacy. The tool aims to empower regulators and attorneys to assess and rectify these violations, promoting a balanced digital ecosystem.

Description: Amazon’s customer service representative was tricked into disclosing Eric Springer, a user’s personal information by an attacker who used social engineering techniques. The attack initiated through the mail ended up in the attacker getting the credit card details along with the address and other details. The incident got all highlighted on the internet and people on the web demanded social engineering training to be given to employees to prevent any such incidents in the future.

Description: Amazon-owned home security camera company Ring fired employees for improperly accessing Ring users' video data. This data can be particularly sensitive though, as customers often put the cameras inside their home. Ring employees in Ukraine were given unrestricted access to videos from Ring cameras around the world.

Description: Amazon had fired a number of employees after they shared customer email address and phone numbers with a third-party violating of their policies. No other information related to account was shared.

Description: Amazon.com Inc’s live streaming e-sports platform Twitch was hit by a data breach. An anonymous hacker leaked Twitch data, including information related to the company’s source code, clients and unreleased games, according to Video Games Chronicle. The data was exposed due to an error in a Twitch server configuration change and was subsequently accessed by a malicious third party.

Description: 3,672 Ring camera owners' login information, including login emails, passwords, time zones, and the names people give to certain Ring cameras, was stolen. This enables a potential assailant to observe cameras in someone's home, which is a grave potential breach of privacy. A hacker might access a Ring customer's home address, phone number, and payment information, including the type of card they have, its last four numbers, and security code, using the login email and password. The nature of the leaked data, which contains a username, password, camera name, and time zone in a standardized format, shows that it was acquired from a company database.

Description: An Amazon S3 bucket containing scans of about 119,000 US and foreign citizens' IDs and personal information was found by researchers. The firm that owns the data, Bongo International, is owned by FedEx and supports North American retailers' and brands' online sales to customers abroad. In the AWS bucket were over 112,000 files, unencrypted data, and customer ID scans from a wide range of nations, including the US, Mexico, Canada, many EU nations, Saudi Arabia, Kuwait, Japan, Malaysia, China, and Australia. FedEx did not remove the S3 bucket until its presence was made public, despite Kromtech's best efforts to get in touch with them.

Description: A vulnerability in Amazon Web Services' Application Load Balancer was discovered by security firm Miggo, which could potentially allow an attacker to bypass access controls and compromise web applications. This vulnerability was not due to a software flaw but stemmed from customers' configuration of the service, particularly the setup of authentication. Researchers identified over 15,000 web applications with potentially vulnerable configurations, though AWS disputes the figure and has contacted customers to recommend more secure setups. Exploiting this vulnerability would involve token forgery by the attacker to obtain unauthorized access to applications, escalating privileges within the system.