internet security
Amazon account security breach
<p>I have received an email from Amazon reporting a security breach on my account (which I do not believe it is genuine and it happens often because of my dynamic IP).</p>

<p>I have requested further details (IP/Location/User Agent/How did they identify it as a breach) but they refused to give me those details.</p>

<p>Is that legal? Is there anything I can do to force them to release the details? I want to make sure it is not an actual security breach.</p>

<p>In general, your computer security is not Amazon's problem, so they wouldn't have any obligation to tell you anything at all unless there is some law or contract specifying otherwise.</p>

<p>Many US states do have <a href="http://www.ncsl.org/research/telecommunications-and-information-technology/security-breach-notification-laws.aspx" rel="nofollow noreferrer">security breach notification laws</a>.  You could try to figure out which state's laws apply here (possibly your state, or the state where Amazon is incorporated, or both), and see what the relevant law says.  In general, though, these laws usually only require the company to tell you that a breach occurred, and what personal information of yours may have been accessed.  I don't think they usually require the company to tell you anything about details of the attack.  </p>
