The lawsuit was filed in a U.S. District Court in Kentucky by a Texas woman just hours after Zappos reported that customer names, phone numbers and email addresses may have been accessed in a security breach.
The suit seeks class action status for the plaintiff Theresa D. Stevens and 24 million other customers, calling the breach a violation of the federal Fair Credit Reporting Act.
Officials with Zappos in Nevada and Amazon in Seattle declined comment.
Zappos announced Monday it was contacting customers by email and urging them to change their passwords.
The Associated Press contributed to this report.
