#Breach 2020 windows 10#

'It kind of demoralizes my soul when even the vendor can’t seem to get it right,' Thornton-Trump says, 'and why the vendor is storing such ancient records in the first place? I think it’s time for governments to start dropping the hammer on these very preventable data breaches.' What positives can other organizations take away from this incident?

#Breach 2020 windows 10#

Given that there has already been interest from European data protection agencies regarding how Microsoft collects data from Windows 10 users, it wouldn't surprise me if there are now further investigations with a view to EU General Data Protection Regulation (GDPR) penalties. 'This is massive, and not unexpected to be honest,' he said, 'it just shows how difficult it is for anyone, even a giant tech company, to manage data and storage correctly.' I asked Ian Thornton-Trump, CISO at Cyjax and co-host of the BeerConOne virtual security conference, for his thoughts about this incident. The statement included an apology from Microsoft: 'We want to sincerely apologize and reassure our customers that we are taking it seriously and working diligently to learn and take action to prevent any future reoccurrence.' It’s time for governments to start dropping the hammer on very preventable data breaches

That posting also confirmed that the exposure of the database started on December 5, 2019, as the result of misconfigured security rules, and was remediated on December 31.