Microsoft Exposed 250 Million Customer Support Records

guest · Jan 22, 2020

Microsoft Exposed 250 Million Customer Support Records
January 22, 2020
https://www.securityweek.com/microsoft-exposed-250-million-customer-support-records

The records on those servers contained 14 years’ worth of logs of conversations between support agents and customers, all of which could be accessed by anyone directly from a browser, without any form of authentication.

Each of the five Elasticsearch servers contained an apparently identical set of records, with data spanning between 2005 and December 2019, Comparitech’s security researchers reveal.
While most of the personal information in those records was redacted, many records contained plain text data.

“I immediately reported this to Microsoft and within 24 hours all servers were secured,” security researcher Bob Diachenko, who led the Comparitech team, explains.
The data was exposed to the Internet for around two days before Microsoft secured the servers.
Click to expand...

The exposed data could be abused in attacks such as tech support scams, where cybercriminals impersonate Microsoft support representatives. With this data in hand they could refer to real case numbers, phish for sensitive information, or hijack devices, Comparitech says.

What is yet unclear is whether other unauthorized parties accessed the databases while they were exposed.
Click to expand...

Comparitech: Report: 250 million Microsoft customer service and support records exposed on the web

Log in or Sign up

Microsoft Exposed 250 Million Customer Support Records

guest Guest

Log in or Sign up

Microsoft Exposed 250 Million Customer Support Records

guest Guest

Useful Searches