Microsoft confirms blunder results in user data leak

A misconfigured Microsoft endpoint was exposing sensitive data about Microsoft’s customers to the wider internet, the company confirmed in a press release published earlier this week. Announcing the news this Wednesday, the Redmond giant said it was notified about the misconfiguration by threat intelligence firm SOCRadar, in late September, and soon afterwards, plugged the hole. 

The language used in the announcement seems to suggest that the data wasn’t accessed by an authorized third party: “This misconfiguration resulted in the potential for unauthenticated access to some business transaction data corresponding to interactions between Microsoft and prospective customers,” the company sad.