Breachesby GlyphMicrosoft
Disclosed Feb 26, 2025Confirmed
Storm-2139 used stolen customer credentials to hijack Azure OpenAI accounts
Microsoft said the Storm-2139 network used customer credentials scraped from public sources to access accounts on generative AI services including Azure OpenAI, altered their capabilities to bypass safeguards and resold access for creating harmful content such as non-consensual celebrity images. Microsoft named four developers in civil litigation.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Feb 26, 2025 |
| Attack | Credential stuffing |
| Data exposed | Source codeAPI keysCredentials and tokensInternal documents |
| Sector | Tech · US |
| Status | Confirmed |
| Lawsuit or fine | Microsoft civil lawsuit against Storm-2139 defendants (2024-2025) |
Sources
Notices filed
Other breaches at Microsoft
Hijacked Microsoft GitHub repos pushed password stealers to AI coding tool usersSupply chain exposed credentials and tokens and passwords.Supply chainTechUSUnverifiedJun 8Microsoft 365 Copilot Chat bug processed confidential-labeled emails for weeksAI or model exposed messages.AI or modelTechUSUnverifiedFeb 18Russian state hackers access Microsoft senior leadership email accountsHacking exposed emails, messages, internal documents and source code. Reported to the SEC 8-K.HackingTechUSJan 19, 2024AI research team's overly permissive SAS token exposed 38TB of internal dataExposed data exposed credentials and tokens, internal documents, messages and passwords.Exposed dataTechUSUnverifiedSep 18, 2023China-based Storm-0558 forges tokens with stolen Microsoft key to read government emailHacking exposed emails and messages.HackingTechUSJul 11, 2023Misconfigured Microsoft storage exposes prospective customer business dataExposed data exposed names, emails, phone numbers and internal documents.Exposed dataTechUSUnverifiedOct 19, 2022Lapsus$ compromises a Microsoft account and leaks Bing and Cortana source codeHacking exposed source code.HackingTechUSMar 22, 2022Hafnium exploits Exchange Server zero-days to breach on-premises mail serversHacking exposed emails, credentials and tokens and messages.HackingTechUSMar 2, 2021SolarWinds attackers view Microsoft source code repositoriesSupply chain exposed source code.Supply chainTechUSDec 31, 2020
History of this record
press to companyby seedSource
https://techcrunch.com/2025/02/26/thousands-of-exposed-github-repositories-now-private-can-still-be-accessed-through-copilot/ to https://blogs.microsoft.com/on-the-issues/2025/02/27/disrupting-cybercrime-abusing-gen-ai/by seedSource
disclosed to confirmedby seedSource
empty to researchby seedSource
0 to 1by seedSource
empty to Microsoft civil lawsuit against Storm-2139 defendants (2024-2025)by seedSource
ai-model to credential-stuffingby seedSource
Lasso found that once-public GitHub repositories, including ones from large companies and Microsoft, remained retrievable through Microsoft Copilot after being set private because Bing had indexed and cached them. to Microsoft said the Storm-2139 network used customer credentials scraped from public sources to access accounts on generative AI services including Azure OpenAI, altered their capabilities to bypass safeguards and resold access for creating by seedSource
Copilot surfaced thousands of GitHub repos after they were made private to Storm-2139 used stolen customer credentials to hijack Azure OpenAI accountsby seedSource
ai to techby seedSource
["source-code","api-keys","credentials"] to ["source-code","api-keys","credentials","internal-docs"]by seedSource
Lasso found that Microsoft Copilot could return content from more than 20,000 GitHub repositories that had been made private or deleted because Bing had indexed and cached them, affecting repositories of major companies including Microsoft. to Lasso found that once-public GitHub repositories, including ones from large companies and Microsoft, remained retrievable through Microsoft Copilot after being set private because Bing had indexed and cached them.by seedSource
Copilot surfaced 20,000+ GitHub repos after they were made private to Copilot surfaced thousands of GitHub repos after they were made privateby seedSource
First recordedby seedSource
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.