What you need to know
- The SolarWinds hackers were able to obtain a portion of source code from three Microsoft services.
- Small subsets of source code from Azure, Intune, and Exchange were downloaded by the attackers.
- Microsoft concluded that the attackers were not able to obtain customer data.
Microsoft recently completed its internal investigation of the SolarWinds attack. The investigation concluded that the people behind the attack did not gain access to customer data. The hackers did, however, manage to download a portion of the source code for Microsoft's Azure, Intune, and Exchange services.
Microsoft states in a blog post (opens in new tab):
Microsoft also details that the attacks were able to download part of the source code of three of its products:
- A small subset of Azure components (subsets of service, security, identity)
- A small subset of Intune components
- A small subset of Exchange components
The attackers were likely seeking to find secrets based on the search terms that they used. Microsoft explains that it does not keep secrets in its code and that it uses automated tools to verify compliance with its rules related to this.
Microsoft President Brad Smith recently said that the SolarWinds attack was probably the "largest and most sophisticated attack the world has ever seen." The attacks targeted government agencies, NVIDIA, Intel, Cisco, Belkin, and other organizations.
The US government believes that Russia was behind the attack, though that's not confirmed at this point.
Sean Endicott is the news writer for Windows Central. If it runs Windows, is made by Microsoft, or has anything to do with either, he's on it. Sean's been with Windows Central since 2017 and is also our resident app expert. If you have a news tip or an app to review, hit him up at email@example.com.
Get the best of Windows Central in in your inbox, every day!
Thank you for signing up to Windows Central. You will receive a verification email shortly.
There was a problem. Please refresh the page and try again.