This has been going on for years, wired covered it a while back…

https://www.wired.com/story/amazon-failed-to-protect-your-da...