{"id":121440,"date":"2026-04-05T04:35:21","date_gmt":"2026-04-05T04:35:21","guid":{"rendered":"https:\/\/mailinvest.blog\/index.php\/2026\/04\/05\/amazons-hacking-claim-targets-regular-browser-users\/"},"modified":"2026-04-05T04:36:29","modified_gmt":"2026-04-05T04:36:29","slug":"amazons-hacking-claim-targets-regular-browser-users","status":"publish","type":"post","link":"https:\/\/mailinvest.blog\/index.php\/2026\/04\/05\/amazons-hacking-claim-targets-regular-browser-users\/","title":{"rendered":"Amazon’s hacking claim targets regular browser users"},"content":{"rendered":"

<\/a>\n
<\/p>\n

\n

Perplexity AI this week filed its opening temporary with the USA Court docket of Appeals for the Ninth Circuit, arguing {that a} preliminary injunction gained by Amazon in March depends on a elementary misreading of federal laptop fraud regulation and, if left in place, would let web platforms use prison statutes to dam competing expertise their very own customers select to put in.<\/p>\n

The 96-page temporary, filed beneath case quantity 26-1444 and dated April 1, 2026, was ready by Quinn Emanuel Urquhart & Sullivan, LLP and presents three core arguments for reversal: that Amazon is unlikely to prevail on the deserves of its claims beneath the\u00a0Pc Fraud and Abuse Act<\/strong>\u00a0(CFAA) and California’s equal statute; that the district court docket improperly collapsed the separate authorized assessments for injunctive aid right into a single deserves discovering; and that the decrease court docket abused its discretion by refusing to require Amazon to submit a bond.<\/p>\n

Background: the Comet browser and the Assistant<\/h2>\n

Perplexity, based in 2022,\u00a0launched its Comet browser on July 9, 2025<\/a>, initially proscribing entry to subscribers of its $200-per-month Max plan. The browser was\u00a0made broadly available on October 2, 2025<\/a>, after thousands and thousands joined a waitlist throughout a three-month restricted interval.<\/p>\n

Constructing Comet was a major endeavor. In accordance with the temporary, Perplexity acquired browser firm Sidekick and assembled a workforce of almost 100 engineers, researchers, and specialists – the most important workforce Perplexity had ever dedicated to a single mission.<\/p>\n

Comet is constructed on Chromium, the identical open-source engine that powers Google Chrome. Like Google Chrome and Mozilla Firefox, it’s a software program program downloaded onto a person’s laptop to navigate the web. It runs domestically on the person’s machine. That architectural reality sits on the middle of the authorized dispute.<\/p>\n

The browser consists of an elective AI “Assistant” function that’s, in line with the temporary, “straight integrated into the online browser itself” and operates on the person’s laptop. Activation shouldn’t be computerized. A person should click on a tab within the higher proper nook of the show to modify it on. As soon as energetic, the Assistant can carry out duties on the person’s route – together with shopping web sites equivalent to Amazon.com to seek for or buy items.<\/p>\n

The technical pipeline works as follows. When a person instructs the Assistant to seek out an merchandise on Amazon, the Assistant could take a screenshot of the shopping session and ship an encrypted model of that screenshot, or an HTML snapshot, from the person’s laptop to Perplexity’s servers. These servers reply to the person’s laptop with directions for the way the Assistant ought to proceed on Amazon. Perplexity makes use of the screenshots and snapshots solely to perform the person’s activity and, when essential, to establish software program errors; they’re routinely deleted inside 30 days. The Assistant by no means sends extra info to Perplexity than what the person can see within the browser window.<\/p>\n

Critically, in line with the temporary, no Perplexity laptop ever has direct entry to an Amazon laptop throughout this course of. Amazon’s personal professional conceded within the district court docket that there are “no direct requests from Perplexity hosts to Amazon.com” and that knowledge from Amazon is “transmitted to the person’s browser after which to Perplexity servers.” The Assistant can not log right into a person’s Amazon account by itself. For purchases, it requires extra handbook person authorization; if the person shouldn’t be already logged in, they have to use “the traditional login course of and their very own login info, with no shortcuts or automated authentication.”<\/p>\n

How the battle escalated<\/h2>\n

Amazon\u00a0contacted Perplexity in August 2025<\/a>\u00a0to complain that its Circumstances of Use require all AI brokers to behave transparently when accessing the Amazon Retailer. Because the temporary notes, Amazon subsequently acknowledged that Perplexity shouldn’t be a celebration to these Circumstances of Use, which bind solely Amazon’s personal customers.<\/p>\n

Amazon’s said concern about transparency centered on Comet’s user-agent string – a technical machine by which browsers establish themselves to web sites. Amazon alleged Perplexity configured Comet to transmit the identical user-agent string utilized by Google Chrome, making the AI agent seem as if a human buyer was shopping relatively than an automatic system. The temporary counters that Comet makes use of considerably the identical user-agent string as different Chromium-based browsers together with Microsoft Edge, Courageous, and Opera, and that Perplexity is beneath no authorized obligation to equip Comet with any explicit user-agent string.<\/p>\n

In accordance with the temporary, the true motive Amazon needed the change was in order that it may establish and block the Comet Assistant, “forcing prospects to view its ads” – a characterization primarily based on Amazon’s personal inside complaints that its advertisers don’t pay for his or her adverts to be proven to “automated brokers.”<\/p>\n

Amazon’s personal promoting enterprise gives vital context.\u00a0Amazon’s third-quarter 2025 advertising revenue reached $17.7 billion, growing 22 percent year-over-year<\/a>. The Comet browser’s AI assistant bypasses sponsored merchandise, suggestions, and different promoting components when customers browse Amazon, which sits on the industrial coronary heart of the dispute.<\/p>\n

Amazon shaped a bunch targeted on\u00a0agentic AI<\/strong>\u00a0in March 2025 and launched a set of agentic AI instruments in October 2025. It additionally gives a software referred to as “Purchase for Me” that permits prospects to buy objects from third-party retailer web sites – typically with out the data of both the client or the retailer – through the use of an agentic AI software to finish the acquisition on the third-party web site.\u00a0Amazon’s Rufus AI assistant reached more than 300 million users throughout 2025 and generated nearly $12 billion in incremental annualized sales<\/a>.<\/p>\n

On October 31, 2025, Amazon despatched Perplexity a letter accusing it of violating the CFAA and the California Complete Pc Information Entry and Fraud Act (CDAFA). Days later,\u00a0Amazon filed the lawsuit on November 4, 2025<\/a>, within the Northern District of California.\u00a0Amazon’s new AI agent rules, formalized in its Business Solutions Agreement effective March 4, 2026<\/a>, present how the corporate has been hardening its governance posture throughout the board.<\/p>\n

The district court docket’s March 9 ruling<\/h2>\n

United States District Judge Maxine M. Chesney issued a preliminary injunction on March 9, 2026<\/a>, only one enterprise day after a listening to throughout which she repeatedly acknowledged the case as unprecedented. On the listening to, Decide Chesney said that the conduct at challenge “nearly as if what [Perplexity is] doing should not be coated” by the CFAA and that “individuals should be allowed to convey these sorts of buying assistants in and have them speak.” She additionally described herself as “form of caught” with the statute as a result of it “is SO broad and covers individuals who could also be performing a useful act.”<\/p>\n

The injunction barred Perplexity from accessing or offering a way for others to entry “Amazon’s protected laptop techniques utilizing AI brokers,” which the court docket outlined broadly as “any software program or laptop program deployed by way of Perplexity’s Comet net browser that may autonomously or semi-autonomously carry out actions and work together with third-party web sites on behalf of, or on the instruction of, any person.”<\/p>\n

The court docket denied Perplexity’s request for a $1 billion bond – which Perplexity had sought primarily based on its market valuation – discovering inadequate info to assign a greenback determine to losses restricted to Comet’s entry to Amazon’s password-protected accounts. It additionally declined to remain the injunction pending enchantment. The subsequent day, Perplexity filed a discover of enchantment, and a motions panel of the Ninth Circuit issued an administrative keep after which stayed the injunction pending the enchantment, with expedited briefing ordered.<\/p>\n

The enchantment: 5 components, 5 deficits<\/h2>\n

The CFAA declare beneath 18 U.S.C. \u00a7 1030(a)(2) requires Amazon to determine 5 unbiased components. Perplexity will need to have (1) deliberately accessed a pc, (2) with out authorization or exceeding licensed entry, and thereby (3) obtained info (4) from any protected laptop, with (5) loss to a number of individuals throughout any one-year interval aggregating no less than $5,000. The temporary argues Amazon is unlikely to fulfill any of them, not to mention all 5.<\/p>\n

On the primary ingredient – intentional entry – the temporary attracts a pointed comparability. A Comet person accessing Amazon from her personal laptop is, the temporary states, “no extra equal to Perplexity accessing Amazon than a Safari person accessing Amazon from her personal laptop is equal to Apple accessing Amazon.” As a result of Amazon sued solely Perplexity, the corporate can not meet the entry ingredient. The one entity reaching Amazon’s servers is the person, on the person’s personal machine.<\/p>\n

On authorization, the argument is that Amazon account holders themselves licensed the Assistant to entry their very own info to facilitate their very own buying. The district court docket acknowledged this conduct could also be “useful” to everybody concerned. No personal info past what the person can see within the browser window was transmitted; the Assistant is, in line with the temporary, functionally “akin to what an individual would see from wanting over the person’s shoulder.” The temporary distinguishes the Fb v. Energy Ventures precedent – which the district court docket relied on closely – by declaring that Energy Ventures concerned an organization accessing third events’ personal info with out these customers’ authorization. On this case, each piece of knowledge the Assistant accesses belongs to the person who activated it.<\/p>\n

On the third and fourth components, the temporary is direct: Perplexity doesn’t connect with, and obtains no info from, Amazon’s servers or laptop techniques. Information arrives at Perplexity’s servers solely after passing by way of the person’s browser – a sequence Amazon’s personal professional confirmed.<\/p>\n

The fifth ingredient, monetary loss, is addressed by way of Supreme Court docket and Ninth Circuit precedent. The temporary cites Van Buren v. United States (2021) and hiQ Labs, Inc. v. LinkedIn Corp. (2022) for the proposition that CFAA “loss” requires “technological harms such because the corruption of information.” Amazon supplied no proof of any such hurt. Its actual criticism is misplaced promoting impressions – monetized consideration that the district court docket dismissed as potential misplaced enterprise, not the form of technological harm the CFAA was designed to deal with.<\/p>\n

The statute’s historical past<\/h2>\n

Congress enacted the CFAA in 1984 beneath the Counterfeit Entry Machine and Pc Fraud and Abuse Act. On the time, the statute imposed prison penalties on those that accessed computer systems “with out authorization” to acquire info, with the preliminary model restricted to computer systems containing nationwide safety info or monetary knowledge and people operated by or on behalf of the federal government. Congress subsequently prolonged the prohibition to any “protected laptop,” outlined as any laptop utilized in interstate commerce.<\/p>\n

The temporary argues that Congress enacted the CFAA “to stop intentional intrusion onto another person’s laptop – particularly, laptop hacking” – analogous to “breaking and getting into.” Courts have persistently held it mustn’t “remodel complete classes of in any other case innocuous conduct into federal crimes just because a pc is concerned.” The California CDAFA, the state counterpart at challenge, was equally “principally geared toward laptop hacking and tampering.”<\/p>\n

The equitable arguments<\/h2>\n

Past the deserves, Perplexity raises two structural arguments. First, the district court docket improperly collapsed the 4 unbiased Winter necessities – probability of success, irreparable hurt, stability of equities, and public curiosity – right into a single discovering. The court docket successfully discovered irreparable hurt just by discovering doubtless success on the deserves, relatively than analyzing it individually.<\/p>\n

On irreparable hurt, the temporary notes that Amazon produced no proof that any buyer had ever complained about or encountered issues with the Assistant. Amazon’s solely articulated hurt was lowered human visitors on its web site and thus fewer promoting alternatives – exactly the form of financial harm compensable in cash damages that doesn’t assist injunctive aid.<\/p>\n

On the stability of equities, the temporary flags the industrial stakes for Perplexity. The Assistant is Comet’s differentiating function. Blocking it on the world’s largest on-line retailer would successfully cripple the browser in its most vital use case. If customers migrate to competing browsers, they’re unlikely to modify again even when the injunction is ultimately reversed. The temporary additionally raises Amazon’s “Purchase for Me” function as an unclean fingers argument: Amazon’s personal agentic AI software lists merchandise from unbiased retailers on Amazon.com with out these retailers’ data or permission, and even listed Perplexity’s personal merchandise with out consent. Amazon can not, the temporary argues, invoke fairness whereas engaged in equal or worse conduct towards third events.<\/p>\n

What this implies for the advert tech and advertising business<\/h2>\n

The authorized contest between Amazon and Perplexity sits squarely in the course of a a lot bigger query: who controls what occurs when a person’s AI agent visits a industrial web site? That query has accelerated quickly.\u00a0The advertising industry saw Amazon, Google, and IAB Tech Lab accelerate autonomous campaign tools simultaneously in November 2025<\/a>, whereas publishers grapple with AI-driven visitors that generates no advert impressions.\u00a0Walmart Connect announced its own agentic advertising strategy in January 2026<\/a>, reflecting how retail media networks throughout the business are recalibrating round AI-mediated buying.<\/p>\n

If the Ninth Circuit upholds the preliminary injunction, it might verify that platform operators can invoke the CFAA to limit third-party AI brokers their very own customers select to make use of – even when these brokers entry solely the person’s personal account knowledge, with the person’s permission, for the person’s profit. That end result would carry important implications for any firm constructing AI assistants, browsers, or brokers that work together with main industrial platforms. It will successfully give platforms a authorized veto over client-side AI software program, no matter what customers need.<\/p>\n

If the Ninth Circuit reverses, the ruling would set up that the CFAA, written in an period of mainframe computer systems and dial-up intrusion, doesn’t lengthen to AI brokers working domestically on a person’s machine on the person’s instruction. That studying would cut back one main authorized threat for firms constructing agentic instruments – however platform operators would nearly actually reply with technical countermeasures and up to date phrases of service relatively than settle for third-party agent entry.<\/p>\n

Reddit filed a separate federal lawsuit against Perplexity on October 22, 2025<\/a>, alleging circumvention of its anti-scraping controls. Perplexity due to this fact faces the Ninth Circuit enchantment whereas managing a number of simultaneous authorized fronts, although the Reddit case includes totally different conduct – net scraping by way of search engine outcomes pages relatively than AI-assisted buying by way of a domestically put in browser.<\/p>\n

The Ninth Circuit heard oral arguments on an expedited schedule. The court docket’s choice, when it arrives, will probably be carefully watched by each firm constructing AI brokers designed to work together with industrial web sites.<\/p>\n

Timeline<\/h2>\n
    \n
  • August 2022: Perplexity AI based<\/li>\n
  • November 2024: Amazon first contacts Perplexity concerning its “Purchase with Professional” function, which allowed paying subscribers to make purchases by way of Amazon utilizing Perplexity-managed Amazon Prime accounts<\/li>\n
  • March 2025: Amazon varieties a bunch targeted on agentic AI<\/li>\n
  • July 9, 2025: Perplexity launches Comet browser for $200 Max subscribers<\/a><\/li>\n
  • August 2025: Amazon contacts Perplexity’s Chief Enterprise Officer Dmitry Shevelenko to complain about Comet’s user-agent string conduct; Amazon institutes a technical block on Comet’s assistant entry to Amazon.com<\/li>\n
  • October 2, 2025: Perplexity makes Comet broadly available following millions of waitlist sign-ups<\/a><\/li>\n
  • October 2025: Amazon launches a set of agentic AI instruments<\/li>\n
  • October 22, 2025: Reddit files federal lawsuit against Perplexity and three data scraping companies in the Southern District of New York<\/a><\/li>\n
  • October 31, 2025: Amazon sends Perplexity a letter accusing it of violating the CFAA and CDAFA<\/li>\n
  • November 4, 2025: Amazon files federal lawsuit against Perplexity in the Northern District of California; Amazon issues legal demand to stop AI-assisted shopping<\/a><\/li>\n
  • November 4, 2025: Perplexity publishes blog post calling Amazon’s action “bullying”<\/a><\/li>\n
  • November 11-13, 2025: Amazon launches Ads Agent at unBoxed conference; IAB Tech Lab releases Agentic RTB Framework v1.0; advertising platforms accelerate agentic infrastructure<\/a><\/li>\n
  • February 17, 2026: Amazon posts updated Business Solutions Agreement to Seller Central introducing formal Agent Policy effective March 4, 2026<\/a><\/li>\n
  • March 4, 2026: Amazon’s Agent Coverage takes impact, requiring AI brokers to establish themselves as automated techniques<\/li>\n
  • March 9, 2026: United States District Decide Maxine M. Chesney grants Amazon’s preliminary injunction in Case No. 3:25-cv-09514<\/li>\n
  • March 10, 2026: Perplexity information discover of enchantment with the Ninth Circuit<\/li>\n
  • Late March 2026: Ninth Circuit motions panel points administrative keep, then stays the injunction pending enchantment and orders expedited briefing<\/li>\n
  • April 1, 2026: Perplexity information its 96-page opening enchantment temporary, Case No. 26-1444, within the Ninth Circuit<\/li>\n<\/ul>\n

    Abstract<\/h2>\n

    Who:<\/strong>\u00a0Perplexity AI, Inc. is the appellant, represented by Quinn Emanuel Urquhart & Sullivan, LLP. Amazon.com Companies, LLC is the appellee. The case is earlier than the USA Court docket of Appeals for the Ninth Circuit.<\/p>\n

    What:<\/strong>\u00a0Perplexity filed its opening temporary on April 1, 2026, difficult a preliminary injunction issued on March 9, 2026, that bars its Comet browser’s AI Assistant from accessing Amazon’s password-protected account sections. The temporary argues the district court docket misapplied the Pc Fraud and Abuse Act and California’s CDAFA, improperly collapsed the equitable assessments for injunctive aid, and erred in refusing to require Amazon to submit a bond.<\/p>\n

    When:<\/strong>\u00a0The underlying lawsuit was filed on November 4, 2025. The preliminary injunction was issued on March 9, 2026. The opening enchantment temporary was filed on April 1, 2026, in expedited proceedings earlier than the Ninth Circuit.<\/p>\n

    The place:<\/strong>\u00a0The unique case was filed in the USA District Court docket for the Northern District of California, Case No. 3:25-cv-09514, earlier than Decide Maxine M. Chesney. The enchantment is pending in the USA Court docket of Appeals for the Ninth Circuit, Case No. 26-1444.<\/p>\n

    Why:<\/strong>\u00a0The dispute facilities on whether or not Perplexity’s Comet browser AI Assistant – which runs domestically on a person’s machine, accesses solely the person’s personal account knowledge with the person’s permission, and sends no info to Perplexity’s servers that the person can not already see – constitutes unauthorized laptop entry beneath federal and state hacking statutes. Perplexity argues that Amazon is utilizing the CFAA to guard its promoting income from AI-mediated buying, to not tackle the form of laptop intrusion these statutes had been designed to stop.<\/p>\n

    \n


    \n Share this text \n <\/p>\n

    \n
    \n
    \n <\/a> <\/p>\n


    \n
    \n <\/a><\/p>\n


    \n
    \n <\/a><\/p>\n


    \n
    \n <\/a><\/p>\n


    \n The hyperlink has been copied!<\/small> \n <\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n