Every public data breach

Disclosed this week44On record26,355

44 disclosed this week · 26,355 on record

Microsoft

Disclosed Dec 31, 2020Confirmed

Official notice

SolarWinds attackers view Microsoft source code repositories

Microsoft found malicious SolarWinds Orion code in its environment and later said the actor viewed files in some source code repositories and downloaded component code for small subsets of Azure, Intune and Exchange, with no access to production services or customer data found.

What is known

People affectedNot stated in the sources we have
DisclosedDec 31, 2020
AttackSupply chain
Data exposedSource code
SectorTech · US
StatusConfirmed
Part ofSolarwinds (2020)

Sources

The organizationblogs.microsoft.com
Important steps for customers to protect themselves from recent nation-state cyberattacks
The organizationweb.archive.org
Microsoft Internal Solorigate Investigation Update
The organizationweb.archive.org
Microsoft Internal Solorigate Investigation: Final Update

Notices filed

TotalDec 31, 2020
ResearchCount not stated

Same campaign

UnisysSolarWinds-related intrusion understated in filings; USD 4M SEC penaltySupply chainTechUSUnverifiedOct 22, 2024MimecastSolarWinds-related intrusion minimized in disclosures; USD 990,000 SEC penaltySupply chainTechGBUnverifiedOct 22, 2024Check PointSolarWinds-related intrusion minimized in disclosures; USD 995,000 SEC penaltySupply chainTechILUnverifiedOct 22, 2024AvayaSolarWinds-related intrusion minimized in disclosures; USD 1M SEC penaltySupply chainTechUSUnverifiedOct 22, 2024US Federal GovernmentLikely Russian APT compromised fewer than ten US agencies via SolarWinds OrionSupply chainGovernmentUSJan 5, 2021SolarWindsBuild system compromise plants backdoor in Orion updates shipped to customersSupply chainTechUSDec 14, 2020FireEyeNation-state attacker steals FireEye red team assessment toolsSupply chainTechUSDec 8, 2020

Other breaches at Microsoft

Hijacked Microsoft GitHub repos pushed password stealers to AI coding tool usersSupply chain exposed credentials and tokens and passwords.Supply chainTechUSUnverifiedJun 8Microsoft 365 Copilot Chat bug processed confidential-labeled emails for weeksAI or model exposed messages.AI or modelTechUSUnverifiedFeb 18Storm-2139 used stolen customer credentials to hijack Azure OpenAI accountsCredential stuffing exposed source code, API keys, credentials and tokens and internal documents.Credential stuffingTechUSFeb 26, 2025Russian state hackers access Microsoft senior leadership email accountsHacking exposed emails, messages, internal documents and source code. Reported to the SEC 8-K.HackingTechUSJan 19, 2024AI research team's overly permissive SAS token exposed 38TB of internal dataExposed data exposed credentials and tokens, internal documents, messages and passwords.Exposed dataTechUSUnverifiedSep 18, 2023China-based Storm-0558 forges tokens with stolen Microsoft key to read government emailHacking exposed emails and messages.HackingTechUSJul 11, 2023Misconfigured Microsoft storage exposes prospective customer business dataExposed data exposed names, emails, phone numbers and internal documents.Exposed dataTechUSUnverifiedOct 19, 2022Lapsus$ compromises a Microsoft account and leaks Bing and Cortana source codeHacking exposed source code.HackingTechUSMar 22, 2022Hafnium exploits Exchange Server zero-days to breach on-premises mail serversHacking exposed emails, credentials and tokens and messages.HackingTechUSMar 2, 2021
History of this record
Added2026-09-25
First recordedby seedSource

First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.

Everything about Microsoft