Microsoft faced privacy concerns regarding their newly launched AI feature named Recall. Recall captures screenshots every five seconds to assist users in retrieving online activities such as recipes or documents. However, despite safety measures, it was discovered that Recall could capture sensitive information such as credit card numbers and Social Security numbers, even with the 'filter sensitive information' setting active. There were gaps identified when sensitive data was entered into a Notepad window or a loan application PDF within Microsoft Edge, which raised alarm within the privacy and security community, leading to significant scrutiny and potential loss of trust from users.
Source: https://www.wired.com/story/microsoft-recall-credit-card-social-security-numbers/
"id": "mic001010225",
"linkid": "microsoft",
"type": "Breach",
"date": "12/2024",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"