250 Million Microsoft Customer Support Records Exposed Online
Thursday, January 23, 2020
By having real sensitive case information and email addresses of affected customers in hand, the leaked data could be abused by tech-support scammers to trick users into paying for non-existent computer problems by impersonating Microsoft support representatives.
"The absence of Personally Identifiable Information in the dump is irrelevant here, given that technical support logs frequently expose VIP clients, their internal systems and network configurations, and even passwords. The data is a gold mine for patient criminals aiming to breach large organizations and governments," COO of ImmuniWeb Ekaterina Khrustaleva told The Hacker News.
"Worse, many large companies and not only Microsoft have lost visibility of their external attack surface, exposing their clients and partners to significant risks. We will likely see a multitude of similar incidents in 2020." Read Full Article
Software Testing NEWS: 160,000 breaches reported in just a year and a half
SC Media: Hacker leaks more than 515,000 Telnet credentials in forum