gcdRadar
archive/Breaches & attacks/AIR-2023-0019
closedclosed 6 Jul 2023Breaches & attacks3 Confirmed exploitationAI

Accidental Exposure of 38TB of Data by Microsoft AI Research

Azure Storage

Microsoft's AI research team accidentally exposed 38TB of sensitive data, including private keys and internal messages, via misconfigured storage tokens. The exposure occurred while publishing open-source training material.

first report
22 Jun 2023
last update
22 Jun 2023

Timeline · 1

  1. 22 Jun 2023Reported Accidental Exposure of 38TB of Data by Microsoft's AI Research Team

Sources · 1

Research and catalogues

  1. 2023-06-22
    Reported Accidental Exposure of 38TB of Data by Microsoft's AI Research Team
    AI Incident Database · incidentdatabase.ai/cite/571

Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.

Classification

lane
Breaches & attacks
AI role
Attack on AI
categories
Data leak
severity
3 · Confirmed exploitation
targets
Microsoft
owasp llm top 10
LLM02:2025 Sensitive Information Disclosure
mitre atlas
no technique for these categories
tags
data-leakazuremisconfigurationcredentials-exposure
dates
happened 22 Jun 2023 · first reported 22 Jun 2023
origin
AI Incident Database
Derived from the AI Incident Database (CC BY-SA 4.0).
record
confidence 0.95 · created 2026-10-18 06:33Z · updated 2026-10-18 06:59Z

Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned

Copy a brief

This record as a short Markdown brief, for a ticket, a chat or a coding agent.

the brief as text
# Accidental Exposure of 38TB of Data by Microsoft AI Research

https://gcdradar.vercel.app/incidents/accidental-exposure-of-38tb-of-data-by-microsoft-ai-research · AIR-2023-0019 · closed 2023-07-06

- Lane: Breaches & attacks
- Severity: 3 (Confirmed exploitation)
- Fix status: No fix needed
- First reported: 2023-06-22
- AI role: Attack on AI
- Products: Azure Storage

## Summary

Microsoft's AI research team accidentally exposed 38TB of sensitive data, including private keys and internal messages, via misconfigured storage tokens. The exposure occurred while publishing open-source training material.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2023-06-22: Reported Accidental Exposure of 38TB of Data by Microsoft's AI Research Team (https://incidentdatabase.ai/cite/571)

## Sources

- 2023-06-22 AI Incident Database: Reported Accidental Exposure of 38TB of Data by Microsoft's AI Research Team https://incidentdatabase.ai/cite/571

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.

Related

  1. closed
    Bing Chat Bing Chat Data Exfiltration via Indirect Prompt Injection

    Research · since 2023 (approx.)

    AI
  2. closed
    Bing Chat Bing Chat Initial Instructions Exposed via Prompt Injection by Testers

    Research · since 8 Feb 2023

    AI
  3. closed
    ChatGPT ChatGPT Conversation Exfiltration via Indirect Prompt Injection

    Research · since May 2023 (approx.)

    AI
  4. closed
    Clearview AI Facial Recognition Tool Clearview AI code repository misconfiguration exposes production credentials and video samples

    Breaches & attacks · Exploited · since 2020 (approx.)

    AI
  5. closed
    ChatGPT ChatGPT Bug Exposes User Chat Histories and Payment Data

    Breaches & attacks · Real loss · since 20 Mar 2023

    AI
  6. closed
    ChatGPT Samsung Source Code and Meeting Records Disclosed via ChatGPT Ingestion

    Breaches & attacks · Real loss · since 11 Mar 2023

    AI