The Justice Department said Amazon.com would pay a $2.25 million civil penalty to resolve allegations that it failed to give identity-theft victims requested transaction records involving potential perpetrators.
A federal judge has entered a stipulated order resolving allegations that Amazon violated the Fair Credit Reporting Act by failing to provide records of transaction records involving believed to have fraudulently used victims' identification either at all or at least within 30 days of a request.
The order imposes a $2.25 million civil penalty and requires Amazon to provide those records, free of charge, within 30 days of a request, subject to verification of the victims' identity and claim of identity theft.
Amazon has also been ordered to post a notice on its website showing identity-theft victims how they can request those records.
The case was investigated and referred to the Justice Department by the Federal Trade Commission. The FTC disclosed the settlement earlier this summer.
An Amazon spokesperson said the company resolved the matter with the FTC and implemented processes to help potential victims of identity theft.
"We are committed to providing customers with their detailed account information when they need it most," the spokesperson said.