Posted On September 22, 2023 Consumer Privacy & Data Breaches
September 22 – The Microsoft data leak lawyers at Console & Associates, P.C are investigating the data leak that was reported after the company was targeted in a recent cyber security attack. The Microsoft data leak resulted in sensitive internal information being leaked.
According to Microsoft’s most recent report, in June 2023, a Microsoft employee shared a URL for a blob store in a public GitHub repository while contributing to open-source AI learning models. However, unknown to the Microsoft employee, the shared URL included the SAS token for an internal storage account. Using this token, which granted broad access, cybersecurity researchers were able to access internal Microsoft information. The leaked data consisted of 38TB of data, including the backups of Microsoft employee workstations, which contained sensitive personal information. In addition, employee credentials, secret keys and 30,000 internal Teams messages were also accessible. However, Microsoft also notes that “No customer data was exposed, and … No customer action is required in response to this issue.”
Microsoft is a software and technology company based out of Redmond, Washington. Microsoft develops, licenses, and supports software products, services, and devices, including the Windows operating system, Office 365, and the Xbox video game console. Microsoft is considered one of the Big Five American information technology companies.
Our data leak lawyers are eager to speak to victims of the Microsoft data leak to determine what damages they sustained and what compensation may be available to them. If you recently received a NOTICE OF data leak from Microsoft and would like a free consultation, contact the Console & Associates, P.C. law firm at (866) 778-5500 to discuss your legal options, or submit a confidential contact form.
