/
Navigation
Chronicles
Browse all articles
Explore
Semantic exploration
Research
Entity momentum
Nexus
Correlations & relationships
Story Arc
Topic evolution
Drift Map
Semantic trajectory animation
Posts
Analysis & commentary
Pulse API
Tech news intelligence API
Browse
Entities
Companies, people, products, technologies
Domains
Browse by publication source
Handles
Browse by social media handle
Detection
Concept Search
Semantic similarity search
High Impact Stories
Top coverage by position
Sentiment Analysis
Positive/negative coverage
Anomaly Detection
Unusual coverage patterns
Analysis
Rivalry Report
Compare two entities head-to-head
Semantic Pivots
Narrative discontinuities
Crisis Response
Event recovery patterns
Connected
Search: /
Command: ⌘K
Embeddings: large
TEXXR

Chronicles

The story behind the story

days · browse · Enter similar · o open

Researchers find a GitHub repo run by Microsoft's AI research unit that exposed 38TB of sensitive data, like secret keys and 30K+ Microsoft staff Teams messages

Microsoft AI researchers accidentally exposed tens of terabytes of sensitive data, including private keys and passwords …

TechCrunch Carly Page

Context & Ripple Effects

This report sits in a recurring Microsoft development-security arc: later coverage described an exposed Azure server containing staff credentials, while 2026 reporting documented Microsoft taking down dozens of GitHub repositories after credential-stealing malware was added to them.

The common issue is not simply a single leaked dataset but the security boundary around code-hosting and cloud-development assets—especially consequential when an AI research unit handles data, credentials and internal communications.

First-order effects

  • Microsoft must treat the exposed keys and passwords as potentially compromised, requiring credential triage and rotation; the exposed staff messages also create an internal privacy and security-review burden.
  • The incident puts Microsoft AI's repository-sharing practices under immediate scrutiny, because a public-facing development workflow exposed material far beyond source code.

Second-order effects

  • Teams responsible for GitHub and Azure access controls are pushed toward tighter repository permissions, secret scanning and checks on shared storage; similar exposure recurred in the Azure credentials incident reported later.
  • Developers and internal users may face more restrictive contribution and access workflows as Microsoft limits the paths through which credentials and research artifacts can be published or shared.

Third-order effects

  • If repeated repository and cloud-asset exposures persist, AI development will increasingly be governed as an enterprise data-security function rather than an informal research collaboration practice.
  • The later shutdown of more than 70 Microsoft GitHub repositories after malware was added suggests that code repositories are becoming a broader credential-security control point, not merely a software distribution channel.

The trend: AI research and software-development infrastructure is becoming governed critical infrastructure, with repository hygiene and credential controls moving closer to core operational risk management.

Discussion

  • @hillai Hillai Ben-Sasson on x
    Why did this happen? 🧐 Account SAS tokens are created offline, with no limit on their expiry or scope. They aren't managed within the Azure portal, and they're also difficult to revoke. These features help easy content sharing, but they can also serve as dangerous pitfalls.
  • @wiz_io @wiz_io on x
    🔒 What happened? While releasing open-source training datasets, Microsoft's AI research team accidentally left the vault door open 👀 Over 38TB of data (!), including personal backups of employee workstations, private keys, and internal Microsoft Teams messages, were exposed. [ima…
  • @hillai Hillai Ben-Sasson on x
    How can you avoid this? 🚨 Avoid using Account SAS for external sharing. Azure offers more secure alternatives, such as Service SAS with Stored Access Policy (for long-term sharing), or User Delegation SAS (for short-lived access).
  • @hillai Hillai Ben-Sasson on x
    Microsoft's AI research team published open-source training data using “SAS tokens” - sharable links granting access to Azure Storage data. Only instead of limiting access to specific files, the token granted access to the ENTIRE account, including *18* storage containers 🤯 [imag…
  • @hillai Hillai Ben-Sasson on x
    Within these containers, our @wiz_io secret scan found: *️⃣ Personal passwords for Microsoft services 🔑 Private keys 📄 Private source code and AI training data 💬 Over 30k internal @MicrosoftTeams messages [image]
  • r/artificial r on reddit
    One-Minute Daily AI News 9/18/2023
  • r/technology r on reddit
    Microsoft leaks 38TB of private data via unsecured Azure storage
  • r/hacking r on reddit
    38TB of data accidentally exposed by Microsoft AI researchers
  • r/cybersecurity r on reddit
    Microsoft AI researchers accidentally exposed terabytes of internal sensitive data |  TechCrunch
  • r/technews r on reddit
    Microsoft AI researchers accidentally exposed terabytes of internal sensitive data