A major global shipping company, Hipshipper, which partners with Amazon, eBay, and Shopify, accidentally exposed millions of shipping labels containing personal customer information.
Cybersecurity expert Thomas Holt from Michigan State University noted that the leak resulted from an unprotected AWS bucket, which researchers traced back to Hipshipper.
The breach, occurring in December 2024, compromised over 14 million customer shipping records and wasn’t addressed until January.
Holt emphasized that the exposed data could be linked to real transactions.