Microsoft online customer accounts hacked in India

Hackers struck India's Microsoft store on Sunday, stealing login identities and passwords of customers who used the Web site for shopping. The hack only affects customers who have purchased a product or software download from Microsoft's Indian online store, but its implications can be felt throughout the multinational company.

The attack was allegedly performed by the Chinese group called Evil Shadow Team. Microsoft has since taken down the hacked site and replaced it with a message telling users that "The Microsoft Store India is currently unavailable. Microsoft is working to restore access as quickly as possible."

Surprisingly, user details - login ids and passwords - were reportedly stored in plain text file, without any encryption. Commenting on the security breach, a Microsoft spokesperson said:

"Microsoft is investigating a limited compromise of the company's online store in India. The store customers have already been sent guidance on the issue and suggested immediate actions. We are diligently working to remedy the issue and keep our customers protected."

Read more -here-

• Dropbox breach exposes customer credentials, authentication data
• Google: Passkey authentications top 1 billion across 400 million accounts
• FTC fines Razer for misrepresenting COVID masks as N95s
• FCC fines Verizon, AT&T other major carriers nearly $200 million for sharing customer data
• Federal regulators accuse Amazon executives of deleting messages
• FCC restores net neutrality rules