Security News > 2020 > January > Microsoft Exposed 250 Million Customer Support Records
Nearly 250 million Microsoft Customer Service and Support records were found exposed to the Internet in five insecure Elasticsearch databases, Comparitech reports.
While most of the personal information in those records was redacted, many records contained plain text data.
Exposed data in those records included customer email addresses, IP addresses, locations, descriptions of CSS claims and cases, Microsoft support agent emails, internal notes marked as "Confidential," and case numbers, resolutions, and remarks, the researchers say.
The data was exposed to the Internet for around two days before Microsoft secured the servers.
The exposed data could be abused in attacks such as tech support scams, where cybercriminals impersonate Microsoft support representatives.