Amazon Return Led to Unauthorized Access to My Apple ID

I am writing to report a serious security incident and an unresolved return involving an 11th Generation iPad that I purchased from Amazon.

I purchased the iPad on June 20 and used it only a few times before noticing a small cosmetic scratch that did not affect the screen or the functionality of the device. Because I was still within Amazon's 14-day return period, I initiated a return.

The package was collected from my home by the courier on July 2, and on July 8 I received confirmation that the returned device had arrived at Amazon's warehouse.

The most serious issue began after the device reached your warehouse. On the night of July 11, at approximately 11:30 p.m., someone attempted to access the Apple ID (iCloud) account that had previously been signed in on the returned iPad. I received two separate login approval requests on my iPhone, both of which I immediately rejected. I also changed my Apple ID password as an additional security measure.

Despite these actions, within minutes the phone number associated with my Apple ID was removed and replaced with another phone number without my authorization. This means that someone was able to gain unauthorized access to my Apple account through the iPad that I had already returned to Amazon. This incident represents a serious breach of my privacy and the security of my personal data.

Following this incident, I contacted Amazon Customer Service repeatedly and spoke with at least five different representatives. Every representative assured me that a case had been opened, that the matter was urgent, and that I would receive a callback during the following business week. However, no one ever contacted me.

After waiting approximately two to three weeks without any update, I contacted Amazon again and specifically requested to speak with a supervisor. I was repeatedly told that supervisors could not be reached or that there was no direct communication with the warehouse. Eventually, I was connected with a manager. I explained the entire situation in detail once again and was promised that I would receive a call within two days. Once again, no one contacted me.

What is even more concerning is that, despite this obvious security breach, I was told that the issue should be resolved with Apple and that Amazon was not responsible. I only contacted Apple to recover and secure my Apple ID after it had been compromised. The unauthorized access itself occurred only after I returned the device to Amazon, indicating that the source of the breach is related to Amazon's return process or personnel handling the returned device.

In addition to this serious security issue, my refund for a product that cost approximately ₺18,485 has still not been properly completed, leaving me without both my device and my money while also exposing my personal account to unauthorized access.

I respectfully request that Amazon immediately complete my return and issue my full refund without any further delay. I also request that Amazon conduct a thorough internal investigation to identify the individual or process responsible for the unauthorized access to my Apple ID after the device was returned.

Furthermore, I request a detailed written explanation regarding this security breach, including the findings of your investigation and the corrective measures that have been implemented to ensure that no other customer experiences a similar incident in the future.