White Hat Hackers Discover Microsoft Leak of 38TB of Internal Data Via Azure Storage

The Microsoft leak, which stemmed from AI researchers sharing open-source training data on GitHub, has been mitigated.

Microsoft has patched a vulnerability that exposed 38TB of private data from its AI research division. White hat hackers from cloud security company Wiz discovered a shareable link based on Azure Statistical Analysis System tokens on June 22, 2023. The hackers reported it to the Microsoft Security Response Center, which invalidated the SAS token by June 24 and replaced the token on the GitHub page, where it was originally located, on July 7.

Jump to:

• SAS tokens, an Azure file-sharing feature, enabled this vulnerability
• What businesses can learn from the Microsoft data leak

SAS tokens, an Azure file-sharing feature, enabled this vulnerability

The hackers first discovered the vulnerability as they searched for misconfigured storage containers across the internet. Misconfigured storage containers are a known backdoor into cloud-hosted data. The hackers found robust-models-transfer, a ...