← Microsoft

60k State Department emails stolen (Storm-0558)

2023 60.0K records affected Share on X

Data compromised

Email addresses

Technical writeup

Chinese hackers (Storm-0558) stole over 60,000 State Department emails. The breach occurred in July when errors allowed the group to steal a key granting broad access to Microsoft customer accounts, including U.S. government.

Root cause

Key theft; Storm-0558 obtained signing key for broad Microsoft customer access.

References