On October 19, 2022, Microsoft confirmed that thousands of users’ sensitive information was exposed due to a security incident dubbed “BlueBleed”. BlueBleed was discovered by cybersecurity company SOCRadar on September 24, 2022, and is the misconfiguration of six (6) storage buckets collectively from one misconfigured Microsoft endpoint. In their blogpost about the incident, SOCRadar stated “The first part of the collection is due to a misconfigured Azure Blob Storage. It can be considered one of the most significant B2B leaks, affecting more than 65,000 entities in 111 countries with sensitive data inside a single Bucket.” The researchers explained that the exposure allegedly amounts to approximately 2.4 terabytes (TB) of data, which is now publicly available and potentially consists of invoices, various business documents, emails, stocks, sales strategies, and more sensitive information. The data also allegedly includes files dated from 2017 to August of 2022 and impacts 548,000 users. In their Microsoft Security Resource Center (MSRC) posting from October 19, Microsoft emphasized that the data includes “names, email addresses, email content, company name, and phone numbers, and may have included attached files relating to business between a customer and Microsoft or an authorized Microsoft partner.” Microsoft also claimed that “SOCRadar has greatly exaggerated the scope of this issue” as their analysis shows duplicate information with various references to the same information. This situation is ongoing, and CTIX analysts will continue to monitor for detail confirmations as well as update as necessary.