250 million records exposed due to misconfigured internal customer support database


In January 2020, the technology company disclosed a data breach occurring through one of its internal customer support databases due to a misconfigured security setting.

Roughly 250 million entries containing mostly anonymized user analytics were exposed to the open internet for 25 days. There was an exception to the anonymization, some email addresses that were entered in non-standard formats may have survived the automatic scrubbing of the logs and remained in plaintext. Individuals impacted in this way received an email from the company.

Book a consultation

Want to discuss this case? You can purchase a 30 minute conference call with our analysts to discuss this case and the implications it has for your organisation. Just select the time and date that works for you:


  • Microsoft Corporation

We've done the analysis so you can make the decisions

When purchasing a minimum of 5 Case Studies
$699.99 if buying less than 5.

  • Detailed cause & effect analysis
  • Lessons learnt catalogued
  • Preventive controls extracted
Add to Cart
Heads up! Want to try before you buy? You can download our FREE demo case study here