Lapsus$ group breaches Microsoft (Azure DevOps)

2022 Unknown records affected

Data compromised

Details not publicly disclosed

Technical writeup

Lapsus$ posted a screenshot from Azure DevOps indicating Bing, Cortana and other projects were compromised. Microsoft confirmed one account hijacked; no customer data compromised.

Root cause

Single account hijack; social engineering.

References

https://msrc.microsoft.com/