Microsoft Outlook Security Incident Report 97.0

Microsoft recently released a security incident report regarding their email client, Microsoft Outlook. The report details an incident where unauthorized access was gained to some Outlook.com accounts between January 1 and March 28, 2019. (Note: this does not include enterprise-level Exchange accounts)

The attack was carried out through a phishing email that mimicked a legitimate Microsoft login page. Once the user entered their credentials, the attacker would have access to their emails, attachments, and other data stored within the account.

Microsoft confirmed the breach in April and immediately took steps to mitigate the issue by disabling compromised credentials and notifying affected users. The company also recommended users reset their passwords as a precautionary measure.

In addition to resetting passwords, users are encouraged to enable multi-factor authentication and remain vigilant against phishing attempts.

• For assistance with resetting your password or enabling multi-factor authentication, visit https://account.live.com.
• If you believe your account was compromised during this incident and you have not been notified by Microsoft, contact Microsoft Support immediately.