But why not? Morally it would have been wrong to allow a leak of something that wasn't rightfully theirs when they had such a simple system set up to fix it all. It would have been wrong if they hadn't emailed every person who owned the book. It would have been wrong if they hadn't offered a refund. But they did, and they did. Amazon's been transparent about all of this.

Any penalties (if proper) to be born should have been born by and only by Amazon.

And they bore it, offered a refund, and sent out an apology. What sort of punishment do you expect them to have suffered otherwise? "Amazon must hang its head and look guilty cos it did a bad thing"?

But to go off on that tangent, no one should have the ability or right to delete anything or deliver any form of "punishment" without a judge being involved, and once it got to that point then simply deleting the files wouldn't be nearly enough.

I said on a separate thread of comments that I don't hold a very firm belief in ownership of data, unless there's money involved. In this case, Amazon gave me the data, encoded to work on their hardware, so I hold that they have the right to do whatever they want with the content on it so long as they don't take my money needlessly. They didn't.