Microsoft

A significant security breach has compromised Microsoft’s PlayReady Digital Rights Management (DRM) system, exposing critical certificates that protect premium streaming content across major platforms including Netflix, Amazon Prime Video, and Disney+. The leak involved the unauthorized disclosure of both SL2000 and SL3000 certificates, with SL3000 representing a particularly severe security concern. These certificates utilize advanced hardware-based security measures designed to protect the highest quality content, including 4K and Ultra High Definition releases. The compromise undermines the fundamental trust model upon which DRM systems operate, posing a critical threat to the entire digital entertainment ecosystem. TorrentFreak researchers noted that the leaked SL3000 certificates could facilitate large-scale content redistribution networks, significantly escalating piracy capabilities.

Source: https://cybersecuritynews.com/microsoft-playready-drm/

TPRM report: https://scoringcyber.rankiteo.com/company/microsoft

"id": "mic732080425",
"linkid": "microsoft",
"type": "Breach",
"date": "8/2025",
"severity": "100",
"impact": "",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'industry': 'Technology',
                        'name': 'Microsoft',
                        'type': 'Corporation'},
                       {'industry': 'Entertainment',
                        'name': 'Netflix',
                        'type': 'Streaming Service'},
                       {'industry': 'Entertainment',
                        'name': 'Amazon Prime Video',
                        'type': 'Streaming Service'},
                       {'industry': 'Entertainment',
                        'name': 'Disney+',
                        'type': 'Streaming Service'}],
 'attack_vector': 'Certificate-Based Attack',
 'data_breach': {'sensitivity_of_data': 'High',
                 'type_of_data_compromised': 'Certificates'},
 'description': 'A significant security breach has compromised Microsoft’s '
                'PlayReady Digital Rights Management (DRM) system, exposing '
                'critical certificates that protect premium streaming content '
                'across major platforms including Netflix, Amazon Prime Video, '
                'and Disney+.',
 'impact': {'data_compromised': ['SL2000 certificates', 'SL3000 certificates'],
            'systems_affected': ['Microsoft PlayReady DRM system']},
 'motivation': 'Piracy and content redistribution',
 'references': [{'source': 'TorrentFreak'}],
 'response': {'containment_measures': ['DMCA takedown notices',
                                       'Account suspensions']},
 'title': 'Microsoft PlayReady DRM System Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Unauthorized disclosure of SL2000 and SL3000 '
                            'certificates'}