You no longer need to wonder what data the police might request from Amazon, as some details have been made public.
Parts of the requests made by law enforcement to Amazon are now visible to anyone on the web without requiring a login. Specifically, the information shows what officers need to submit requests, as well as how easy it is to make certain “claims,” TechCrunch has discovered.
Police are able to request a range of sensitive details, such as order ID numbers, device, payment information, or even social security numbers for delivery drivers. They can also share domain names and IP addresses if they are also looking for Amazon Web Services. However, you still won't be able to access customer data that has been given to authorities or existing requests that are published on the website.
Investigators may need connections for non-emergency requests, but they must “declare and verify” that they are officers if there is an emergency. We wouldn’t expect such widespread abuse, as you could easily face legal penalties or other problems, but it is theoretically possible to abuse the system.
According to Engadget, requests for comment have been made to Amazon, but so far it has not yet responded to relevant questions.
It's not the first time that a major tech company's "web portal" has been exposed to the internet. The parent company found that anyone with an email address could reach the social networking site Facebook.
This certainly provides insight into how system , and raises questions about security if the public can accidentally cross-check with the application system.
