Skip to main content

Thousands have data exposed in Microsoft security breach

Microsoft is picking up the pieces from a data breach on its Xbox Entertainment Awards website, after thousands of voters entering a prize draw had their personal details inadvertently published on the site.

The leak was uncovered by a web user who contacted gaming site MCV (opens in new tab) to say the names, gamertags, emails and dates of birth belonging to those who had voted on the product awards were visible online. The report was verified and those accessing the site could also remove and edit each listing.

Microsoft has now taken the site completely offline, replacing it with the message, “This application is undergoing maintenance right now. Please check back later.”

Before it was taken down, the reader who first noticed the issue said the number of users exposed totalled 2,898.

"We are currently experiencing technical difficulties with the Xbox Entertainment Awards landing page and have taken the site offline while we investigate,” Microsoft said in statement to MCV, who also provide a (respectfully pixelated) screen grab of the leaky page below.

Will began working life as a technology journalist at ITProPortal as Senior Staff Writer. He's worked as a Copywriter, then Creative Lead across video, social, email, web and print. He is currently a Senior Content Strategist at Zone.