Microsoft Customer Emails Breached in Midnight Blizzard Hack
Microsoft has warned that Russia-based Midnight Blizzard hackers have breached not only staff inboxes but also customer emails. Find out more about the incident and its implications for Microsoft’s customers.
- The Russia-based cyberespionage group Midnight Blizzard has targeted Microsoft users to steal other emails.
- Earlier this year, Microsoft declared the hack an ongoing attack, warning users to undertake mitigation measures.
According to a warning from the tech giant, the Russia-based Midnight Blizzard hacking group, which breached Microsoft systems and staff inboxes earlier this year, has also stolen customer emails. The declaration highlights the scale of the breach, which is much broader than what was reported before.
The disclosure comes when Microsoft faces scrutiny from the US government over the security of its products and services against foreign entities. A China-based hacking group that breached Microsoft in 2023 has already stolen US government emails. While the Russian government has not commented on the hacks, Microsoft has alleged that researchers investigating the Russian hack were themselves being targeted.
See More: LockBit Claims Stealing 33TB Banking Information From the US Federal Reserve, Claims Proven False
Four months after the initial hack in January, Microsoft alarmed customers and industry partners by stating that Midnight Blizzard hackers were still trying to break in. Microsoft has indicated that it has shared compromised email details with its affected customers. However, it has not shared information about the number of customers impacted or the emails stolen.
While the incident’s full scope has not been clarified, customers have posted screenshots of the Microsoft notifications on social media platforms, confirming the hack’s impact. This development is essential to note as it is likely to negatively impact users and the US government’s trust in the company’s products and services in the near future.
LATEST NEWS STORIES
- Critical Security Alerts: Impact on Juniper Networks, D-Link, and GitLab Products and Services
- Critical OpenSSH Server Vulnerability Allows Remote Code Execution
- HubSpot Faces Cyberattack, Approximately 50 Customer Accounts Breached
- Google Chrome to Start Blocking Websites Using Entrust Certificates
