Oh FFS
I got one of these. No idea how easy it was to find my details. No indication of how long they were exposed for. And yes nothing about informing the ICO.
If I was Amazon I'd be analyzing my logs to to at least work out if this data has been mined systematically or not. Potentially somebody has my home address and a list of all the products I've reviewed. Fantastic. Time to stop doing product reviews altogether...