Skip to main content

Thousands have data exposed in Microsoft security breach

Microsoft is picking up the pieces from a data breach on its Xbox Entertainment Awards website, after thousands of voters entering a prize draw had their personal details inadvertently published on the site.

The leak was uncovered by a web user who contacted gaming site MCV to say the names, gamertags, emails and dates of birth belonging to those who had voted on the product awards were visible online. The report was verified and those accessing the site could also remove and edit each listing.

Microsoft has now taken the site completely offline, replacing it with the message, “This application is undergoing maintenance right now. Please check back later.”

Before it was taken down, the reader who first noticed the issue said the number of users exposed totalled 2,898.

"We are currently experiencing technical difficulties with the Xbox Entertainment Awards landing page and have taken the site offline while we investigate,” Microsoft said in statement to MCV, who also provide a (respectfully pixelated) screen grab of the leaky page below.