Microsoft users' emails exposed in data breach

Microsoft has confirmed that some of its email services have been breached by hackers, with the contents of some user emails exposed by the attack.

The technology giant said a "limited" number of accounts had been affected by the breach, but confirmed around 6% of those involved may have seen the content of their emails become accessible to the attackers.

According to an email sent to the majority of affected users and then posted online, the firm said a Microsoft support agent's credentials were compromised, potentially allowing unauthorised access to some account information.

For most this included a person's email address, folder names, subject lines of emails and the names of other email addresses users communicated with between January and March this year, but not the content of emails or attachments.

However, when approached for comment on the incident, Microsoft confirmed that a small group of users had also been notified that bad actors could have gained unauthorised access to the wider contents of their emails.

The company said it was providing additional guidance and support to those users.

"We addressed this scheme, which affected a limited subset of consumer accounts, by disabling the compromised credentials and blocking the perpetrators' access," a Microsoft spokesman said of the incident.

Microsoft operates email services including Outlook, MSN and Hotmail.

The company has not confirmed the number of accounts, in total, affected by the breach.

The firm warned in its email that users might receive more spam and phishing emails as a result of the incident, and urged users not to click on links from email addresses they did not recognise.

The company added that although password information had not been affected, it encouraged users to change their log-in details "out of caution".

The tech giant said it had also increased detection and monitoring for the affected accounts.

The incident follows the discovery in January of more than 770 million email addresses from a variety of services in an online database allegedly used by hackers.

- Press Association

More on this topic

Staff error blamed for data breaches at Passport Office

30 nations pitch internet security rules amid Huawei concern

Sensitive patient records found on Cork city street

No action taken against tech companies despite 2,000 complaints in 2018

More in this Section

Raspberry Pi 4 micro-computer launched

How to spot a fake review online

Google to stop making tablet computers

Huawei P30 is much more than Pro’s little brother


Lifestyle

Stereolab: The right band at the wrong time

Kaleidoscope: The festival that is Electric Picnic for families

The High Priestess of Punk on 40 years in showbusiness ahead of Irish gig

Orla O’Regan: ‘I treasure the way my life has turned out’

More From The Irish Examiner