Amazon Launchpad caused multiple GDPR data breaches, tried to covered it up and breached my contract

I’m posting this on the forum as I’m hoping someone at Amazon might see this and actually resolve the issue.

Amazon was fined last year for a massive GDPR data breach, so I’m surprised by the frankly grossly unprofessional and unlawful approach to this situation.

I joined Amazon Launchpad a few months ago. If you don’t already know - Launchpad is designed (in theory) to give additional support for new brands, mainly from a crowdfunding background.

I must stress - I pay for this Amazon Launchpad ‘service’.

A few weeks ago I received an email from someone at Amazon Launchpad. However, I noticed that this email had caused a data breach. My personal details - name and email address - were forwarded to almost 60 other individuals (I assume other Launchpad members he was looking after). All 60 of us now had the contact details of other random people - essentially 60 mini data breaches.

I emailed the Launchpad guy about this within minutes and told him what he had done and the potential financial impact of a GDPR data breach. I requested my email be forwarded to Management to sort out and to consider compensation.

He did not respond to my email.

A couple of hours later I started to receive emails from Microsoft Outlook informing me that the Launchpad guy was attempting to delete emails from my inbox! To be honest, I didn’t know you could technically recall sent emails from other peoples’ inboxes - but only if the recipient hadn’t already opened it.

Unfortunately for him, this exposed a bigger issue - this wasn’t the first data breach! He was quietly attempting to delete older emails where more data breaches had occurred!

A couple of hours after that, an email was sent out from an Amazon Launchpad Manager to the 60 people affected. It simply asked people to ignore and delete the previous emails. It made no mention of a data breach or the fact that their personal data had been compromised!

I then received an email from the same Launchpad Manager telling me that it was an isolated incident and it had been resolved. Firstly, it wasn’t an isolated incident. That’s the equivalent of saying a serial killer was an isolated incident because it was one person committing the crimes! Secondly, it wasn’t resolved, it was covered up.

Annoyed and frustrated - I went to my Launchpad Account Manager and complained about the situation - specifically about the poor handling of it. I said as this was a material breach of my Launchpad contract, I wanted to leave Launchpad. As in the Terms of our agreement, they have 30 days to cure (as in fix and compensate for their mistake) or let me leave Launchpad.

He completely ignored my email.

A few days later - I sent him a follow up email asking for an update. He also ignored this email.

I then received another email from the same Launchpad Manager. My Account Manager ignored me but sent my emails to her! She again stated that the matter is resolved and no further action will be taken.

I sent an email back telling her that Amazon has a legal duty to report data breaches to the Information Commissioner’s Office and to inform individuals of a data breach. I also said that I doubt she passed this breach to a Data Protection Officer or officially logged this anywhere within the company.

She has ignored this email.

I am essentially being held hostage in a contract that they won’t fix after breaching it and they also refuse to sort out the data breaches. A data breach can have dire financial consequences for an individual - I have been a victim of a data breach in the past - it is not fun.

Does anyone have any contact details of someone high up in Amazon who might deal with Amazon Launchpad or Data Protection stuff?