Security company SOCRadar said the data, covering a period from 2017 to August 2022, included invoices, contracts and potentially intellectual property.
Microsoft said in a disclosure that the security firm “greatly exaggerated the scope of this issue” as some of the data contained “duplicate information, with multiple references to the same emails, projects, and users.”