Microsoft Employee Information Leaked After Third-Party Data Breach
Published on July 10, 2024
- A hacker posted a dataset containing leaked data of current Microsoft employees on a cybercrime forum.
- The post claimed the data breach was obtained after the compromise of a third-party vendor.
- This security incident impacted over 2,000 individuals, exposing their full names, emails, LinkedIn profiles, and more.
A recent third-party vendor data breach exposed the sensitive information of over 2,000 Microsoft employees. The leak posted by a hacker on a Dark Web forum contains personal and professional details of 2,073 current employees, as confirmed by The Cyber Press Research Team.
The threat actor, known as ‘888,’ claimed the breach originated from an unnamed third-party vendor this month and includes full names, job titles, email addresses, verification status, personal and corporate phone numbers, team affiliations, LinkedIn profiles, company website details, city, state, and country.
The leak apparently impacts several high-ranking people in various departments within Microsoft, such as C-suite executives, directors, and vice presidents in Azure Cloud, Sales, Finance, Project Management, Development, Data Center, and Business Development.
This highly sensitive data can be leveraged by threat actors in phishing attacks, Business Email Compromise (BEC) scams, or reputational damage via crippled investor confidence and customer trust.
On July 3, ‘888’ also posted on a popular hacking forum Shopify’s data breach information that the company said was caused by an unnamed third-party app. The sample boasted over 173,000 sets of user information, which apparently included Shopify IDs, full names, email addresses, phone numbers, order counts, total spending, and subscription statuses.
Microsoft last month announced that the Russian ‘Midnight Blizzard’ threat actor had exfiltrated their corporate email accounts over six months ago and also gained access to some customer accounts that corresponded with the the stolen ones. The threat actor reportedly used password spraying to compromise a legacy account of Microsoft’s corporate network and then accessed some Microsoft corporate email accounts.
