Endlessness of Microsoft causes millions of personal data to be exhibited

Due to the poor configuration of Microsoft Power Apps , a platform that facilitates the process to create custom applications in the cloud without having knowledge about programming, the company of Redmond exhibited by error the personal data of millions of People all over the world.

According to UPGUARD , Cybersecurity company, this carelessness caused multiple organizations, both public and private, and who made use of Microsoft Power Apps, have their exposed information. The initial problem occurred due to the way the settings of the stored data were configured. That is, when they were in Tables mode, they had protection, but when they were in List mode, it was the default setting, they were exposed and any user without authorization could access them.

Specifically, 38 million personal records were exhibited, some of them had things like Social Security numbers, names, telephones and email address of the public sector. But as I told you before, the problem also affected private companies as Microsoft and American Airlines itself.

In declarations for hypertextual, Microsoft responded with the following:

Our products provide clients features flexibility and privacy to design scalable solutions for a wide variety of needs. We take safety and privacy very seriously, and we encourage our clients to use the best practices when configuring the products in the way that best suits their privacy needs.

It seems that from Microsoft have already been able to adjust the configuration to prevent this problem from repeating in the future again.

VIA: UPGUARD