# Microsoft AI researchers exposed 38TB via an over-permissive Azure SAS link · pwn.watch

> A public GitHub repo of Microsoft AI training models shared an Azure Storage SAS token with full-control permissions on a whole storage account. It exposed 38TB of internal data, including workstation backups, secrets and Teams messages. Wiz found and reported it.

Page: https://pwn.watch/i/microsoft-ai-research-sas-token-38tb-exposure-2023 · generated 2026-10-22T21:08:49.695Z

## Status
- Severity: high · status: closed · patch: patched
- Product: Microsoft Azure Storage (SAS token in a GitHub repo)
- Started: 2023-06-22 · closed: 2023-09-18

## Follow this incident
- RSS (one item per update): https://pwn.watch/i/microsoft-ai-research-sas-token-38tb-exposure-2023/feed.xml
- JSON Feed: https://pwn.watch/i/microsoft-ai-research-sas-token-38tb-exposure-2023/feed.json
- Full data (timeline, sources, posts, agentBrief): https://pwn.watch/i/microsoft-ai-research-sas-token-38tb-exposure-2023.json
- This file: https://pwn.watch/i/microsoft-ai-research-sas-token-38tb-exposure-2023/llms.txt

## Updates (newest first)
- 2023-09-18: Public disclosure by Wiz and Microsoft (https://www.wiz.io/blog/38-terabytes-of-private-data-accidentally-exposed-by-microsoft-ai-researchers)
- 2023-06-24: Microsoft revokes the SAS token (https://msrc.microsoft.com/blog/2023/09/microsoft-mitigated-exposure-of-internal-information-in-a-storage-account-due-to-overly-permissive-sas-token/)
- 2023-06-22: Wiz reports the exposure to Microsoft (https://www.wiz.io/blog/38-terabytes-of-private-data-accidentally-exposed-by-microsoft-ai-researchers)

## Fix brief
# Security brief: Microsoft AI researchers exposed 38TB via an over-permissive Azure SAS link

Source: https://pwn.watch/i/microsoft-ai-research-sas-token-38tb-exposure-2023 · status: closed (closed Sep 18, 2023) · severity: high · updated Sep 18, 2023

## Patch status
**PATCHED: fixed releases exist. Upgrade to a fixed version.**

## What it is
A public GitHub repo of Microsoft AI training models shared an Azure Storage SAS token with full-control permissions on a whole storage account. It exposed 38TB of internal data, including workstation backups, secrets and Teams messages. Wiz found and reported it.

Severity detail: Cloud storage exposure of internal data and secrets

- Product: Microsoft Azure Storage (SAS token in a GitHub repo)

## Affected versions
- Not specified in the data. Check the advisories below.

## Check whether you're affected
No generic command applies (the product is a hosted service, appliance or desktop app). Check the installed version in its admin UI / About screen and compare with the versions above.

## Fix
No fixed version is listed. Follow the vendor advisory below.

## Secrets to rotate
This incident involves possible credential exposure. Rotate any credentials (API keys, tokens, env vars, SSH keys) that were present on affected systems or in affected builds while vulnerable/compromised versions were installed, and review access logs.

## Latest updates
- Sep 18, 2023: Public disclosure by Wiz and Microsoft
- Jun 24, 2023: Microsoft revokes the SAS token
- Jun 22, 2023: Wiz reports the exposure to Microsoft

## Advisories
- [Microsoft mitigated exposure of internal information in a storage account due to overly-permissive SAS token](https://msrc.microsoft.com/blog/2023/09/microsoft-mitigated-exposure-of-internal-information-in-a-storage-account-due-to-overly-permissive-sas-token/) (Microsoft)

## Write-ups & news
- [38TB of data accidentally exposed by Microsoft AI researchers](https://www.wiz.io/blog/38-terabytes-of-private-data-accidentally-exposed-by-microsoft-ai-researchers)

## Caveats
The link had been public since 2020 per Wiz; startedAt is the report date.

---
Machine-readable: https://pwn.watch/i/microsoft-ai-research-sas-token-38tb-exposure-2023.json · all incidents: https://pwn.watch/incidents.json. Verify against the vendor advisory before changing production systems.