Home › Intelligence › Brief
BREACH BRIEF🟡 Medium ThreatIntel

Amazon’s “About You” Page Infers Sensitive Personal Details, Raising Privacy Concerns

Amazon’s new “About You” profile shows algorithmic inferences—e.g., body‑type remarks—derived from shopping behavior. This highlights a privacy‑control gap for organizations that must manage inferred data under regulations, underscoring the need for auditable consent and deletion mechanisms.

LiveThreat™ Intelligence · 📅 October 09, 2026· 📰 malwarebytes.com
🟡
Severity
Medium
TI
Type
ThreatIntel
🎯
Confidence
High
🏢
Affected
2 sector(s)
✅
Actions
3 recommended
📰
Source
malwarebytes.com

Amazon’s “About You” Page Infers Sensitive Personal Details, Raising Privacy Concerns

What Happened — Amazon’s newly visible “About You” profile surfaces algorithmic inferences about shoppers, including remarks such as “has flat buttocks.” The feature aggregates purchase history, searches, saved items, reviews, and Alexa shopping conversations, then presents categories that can describe lifestyle or body attributes. Users can delete individual entries, but there is no bulk opt‑out for the underlying inferences.

Why It Matters for Trust & Control Assurance

  • Continuous privacy‑control programs must capture not only data that is explicitly provided, but also algorithmic inferences that can be treated as personal data under GDPR, CCPA, and similar regimes.
  • The ability to audit, edit, and delete inferred attributes demonstrates a control‑assurance gap: organizations need documented processes for purpose limitation and data minimization.
  • Verisq’s CookiePLUS capability helps you surface, manage, and obtain consent for inferred data, providing defensible evidence for privacy audits.

Who Is Affected — Retail & e‑commerce platforms, consumer‑facing SaaS, and any organization that builds recommendation engines from behavioral signals.

Recommended Actions

  • Conduct a privacy impact assessment of all inference‑driven profiling features.
  • Implement a bulk‑opt‑out mechanism and clear documentation of how inferred data is used.
  • Capture consent records and deletion logs to satisfy audit‑readiness for privacy regulations. Source: Malwarebytes Labs

Technical Notes

  • No technical vulnerability disclosed; the risk stems from data‑processing practices and algorithmic profiling.
  • The profile draws on purchase history, search queries, saved lists, product reviews, and Alexa shopping conversations. Source: same as above
📰 Original Source
https://www.malwarebytes.com/blog/news/2026/10/amazon-has-an-uncomfortably-personal-profile-on-you-check-yours-now ↗

This LiveThreat Intelligence Brief is an independent analysis. Read the original reporting at the link above.

From the Verisq platform · PrivacyOps · CookiePLUS

A privacy incident is a question about your consent record.

CookiePLUS and Verisq AI Trust Operations keep consent, DSAR, and data-handling evidence continuously ready — so a data-exposure event finds you prepared, not scrambling.

See how Verisq AI Trust Operations handles privacy →