Ask HN: Has AWS Been Hacked? I just received the following email, to an email address that has only ever been used once, to register an AWS account in 2021. ---- On Thu, 19 May 2022 03:47:29 +1000 Carent Domingo <yourdomainguru.ren49@gmail.com> wrote ---- |
Another possibilty is that overseas contractors for AWS regularly harvest email addresses from the support UI and spam them. Wouldn't surprise me, but the first is more likely. Wouldn't really call this a hack though either way.
If this was a practice that was possible and occurring then I suspect we'd have heard of many more cases by now. Most big companies don't use contractors for work that gives them access to customer data like that, and most don't just allow anyone easy access to raw customer data without a paper trail and reason.
[citation needed]
Okta is a recent counter-example.
Most companies probably don't take care of these things at the rate or level you seem to be assuming that they do.
Is the email predictable?
I use a dedicated email address for AWS and I have only ever received AWS correspondence to it.
Trademark filed 1998-08-25.
WHOIS reports this domain was registered 2021-06-01.
A risky purchase.