Outlook Email Hack Exposed Customers’ Messages

Microsoft’s reaction

After discovering the data breach, Microsoft was quick to warn its users by email explaining that individuals outside of the company were able to access affected users’ email addresses, folder names, the subject lines of emails, and the names of other email addresses that the user communicates with. The company assured users that it had already disabled access to the hacked support agent’s account and that the content of the messages and attachments were not compromised. However, after numerous reports, Microsoft later released a new statement confirming that email content was also accessed. Further conflicting reports arose when discussing the amount of time for which hackers had access to the content. While Microsoft claims that they had access to the data for a period of three months from January through to March 2019, other sources suggest it was as much as six months.

As an additional measure of security, Microsoft advised users to update their credentials and be alert of possible phishing emails being sent in the next weeks.

While it is worth applauding the fact that Microsoft took the effort to inform the affected users instead of trying to keep the breach hushed, it’s also disappointing that the company tried to omit information to further discredit the leak. This is important because as one of the leading companies in the world, Microsoft should be investing in online security for its own employees to ensure this situation never happens.

How to stay safe from a data breach

This isn’t the first time a major company is the subject of a major data breach. Ahead of 2018’s Black Friday sales, Amazon was victim of a data breach that exposed user details such as names and email addresses.

Combining the use of an antivirus with a VPN is also a good choice to avoid being hacked or having personal data being stolen, too. Antiviruses protect the device by checking for any kind of infected archive or malware that may be hidden. Some antivirus services also include internet protection and email encryption.

And since internet service providers can monitor their customers’ online activity, network encryption is also important whenever browsing in public or even using an private connection. VPN services provide encrypted, anonymous, and private connections, ensuring that users can safely browse the internet, send emails, or make payments without any worries.