Some of the sensitive information of Microsoft customers was exposed by a misconfigured Microsoft server accessible over the Internet in September 2022.
The exposed information includes names, email addresses, email content, company name, and phone numbers, as well as files linked to business between affected customers and Microsoft or an authorized Microsoft partner.
However, the leak was caused by the "unintentional misconfiguration on an endpoint that is not in use across the Microsoft ecosystem" but the SOCRadar claimed to link this sensitive information to more than 65,000 entities from 111 countries stored in files dated from 2017 to August 2022.
"id": "MIC01121122",
"linkid": "microsoft",
"type": "Breach",
"date": "09/2022",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"