Reports suggest that Microsoft researchers accidentally leaked 38TB of confidential information onto the company’s GitHub page where it could be downloaded by potentially everyone. The incident reportedly happened in June 2023.
According to a report in Digital Trends, the data trove included backups of two former employees’ workstations, including keys, passwords, and more than 30,000 private team messages.
The report in Digital Trends further stated that the leak was accidentally included in a tranche of open-source training data and visitors were encouraged to download it, which would mean that it could fall into the wrong hands again and again.
While data breachers are embarrassing for any company, it’s even worse since it came from Microsoft’s AI researchers. The data was uploaded using Shared Access Signature (SAS) tokens, that lets users share data through Azure Storage accounts.
Visitors to the repository were told to download the training data from a provided URL. However, the web address granted access to much more than just the planned training data, and allowed users to browse files and folders that were not intended to be publicly accessible.
Meanwhile, Wiz, the American cloud security startup added that Azure access tokens allowed full control permissions which meant that anyone who visited the URL could delete and overwrite the files they found, going far beyond just viewing them. Wiz further extolled that there were more serious consequences for such a leak since the repository contained AI training data
{{/usCountry}}Meanwhile, Wiz, the American cloud security startup added that Azure access tokens allowed full control permissions which meant that anyone who visited the URL could delete and overwrite the files they found, going far beyond just viewing them. Wiz further extolled that there were more serious consequences for such a leak since the repository contained AI training data
{{/usCountry}}Wiz explains that this could have had dire consequences. As the repository was full of AI training data, the intention was for users to download it and feed it into a script, thereby improving their own AI models.
Wiz added: “Yet because it was open to manipulation thanks to its wrongly configured permissions, an attacker could have injected malicious code into all the AI models in this storage account, and every user who trusts Microsoft’s GitHub repository would’ve been infected by it.”
The Wiz report further added that the creation of SAS tokens wouldn’t create a paper trail or breadcrumbs so even the admin wouldn’t know if the token existed or where it circulated. Wiz added that it had reported the issue to Microsoft in June 2023, the SAS token was replaced in July and Microsoft completed its investigation in August. The lapse was made public once the issue was fully resolved. You can read more in this Wiz report.