Report a security or privacy issue
Use this public channel to report suspected vulnerabilities, privacy incidents or actual or suspected misuse of data, including Amazon data. No account is required.
How to report an issue
Use the subject “Privacy / security report”. Describe the affected page or feature, the time, what you observed and the possible impact. Where possible, include steps to reproduce the issue and a contact address for follow-up questions.
Do not include customer data, passwords or access keys in your initial message. We will agree an appropriate way to share confidential details if needed.
What happens after you report
- Acknowledgement and reference. Paul Schmidt or Christian Prasser receives your report and acknowledges it with a reference number. We use that reference to document our assessment, questions and progress.
- Assessment and priority. We assess the issue and its potential impact on people and data. Reports indicating an ongoing incident or possible data exposure take priority. We may request further details.
- Action and updates. Confirmed issues are addressed according to urgency, with appropriate protective measures. We provide progress updates and separately arrange any legally or contractually required notifications.
- Resolution. We check the measures taken, document the outcome and inform you of the resolution or the reasons for our assessment, without disclosing confidential information.
Please limit testing to what is necessary. Do not access other people’s data or disrupt the service. Include your reference number when following up on a report.
Privacy information for security reports · Other contact options