4KMiles Data Breach Exposes Millions of Amazon Shoppers – What Happened?

In October 2019, 4KMiles, an Amazon Official Partner known for its SaaS solutions supporting Amazon sales operations, suffered a significant data breach that impacted millions of Amazon shoppers. The breach resulted in the unauthorized exposure of over 11.2 million records containing sensitive customer data. Affected information included full names, physical and mailing addresses, email addresses, usernames, phone numbers, hashed passwords, and even social security information. Due to both the number of people impacted and the type of personal data involved, this breach stands out as one of the most substantial among SaaS providers serving major e-commerce platforms.

Timeline of the 4KMiles Breach

The security incident is reported to have occurred on October 1st, 2019. The breach is believed to have stemmed from a vulnerability in the company's data storage, which was subsequently exploited to access a database containing detailed shopper profiles. The incident response focused on identifying the breach source, understanding the scope of exposed information, and coordinating notifications for those potentially impacted.

Scope and Affected Users

The breach affected approximately 11,296,314 records, primarily related to Amazon shoppers whose purchase and account information had been processed by 4KMiles. This included at least 9.4 million distinct Amazon shoppers, highlighting the scale of the exposure. The compromised data included a wide range of personally identifiable information (PII) that could concern affected individuals given the volume and detail of the records leaked.

What Data Was Exposed?

Full names
Street addresses (and address details)
Cities, states, ZIP codes, countries
Email addresses
Usernames
Phone numbers
Hashed passwords
Social security numbers and related identifiers

This level of detail means that exposed users were vulnerable not just to unsolicited communications, but potential misuse of their information for more malicious purposes.

Frequently Asked Questions about the 4KMiles Breach

What happened in the 4KMiles data breach?

The 4KMiles data breach took place in October 2019 and involved unauthorized access to a database containing sensitive Amazon shopper details managed by 4KMiles. The breach exposed millions of records with personal and contact information.

How many users were affected by the 4KMiles breach?

Over 11.2 million records were compromised, affecting at least 9.4 million Amazon shoppers who had data processed through 4KMiles' SaaS platform.

What information was compromised in the 4KMiles breach?

Exposed details included full names, mailing addresses, email addresses, usernames, phone numbers, hashed passwords, and social security information.

Was my Amazon account involved in the 4KMiles breach?

If you made purchases or shared information on Amazon accounts where 4KMiles provided sales operation services, your data may have been included among the exposed records. 4KMiles worked as an official Amazon partner and stored extensive customer information.

How can I check if I'm in the 4KMiles breach?

You can check if your information was part of the 4KMiles breach by utilizing the DeHashed search engine.