Microsoft India Store Hacked. Passwords Exposed! (Update)

Microsoft India Store ( https://www.microsoftstore.co.in ) has been hacked and as of now, none of the parts of the website are accessible. It looks like the hack has been performed by Chinese 'Evil Shadow Team' (7z1&Ancker). What looked like a simple 'evil.html' file placement on the server, later revealed that the complete database of the MS India store has been cracked and passwords were exposed in plain text. The message that was displayed on the website was "unsafe system will be baptized". We checked the website few moments ago and it seems that Microsoft team has taken down the access to the website and none of the pages are loading.


Microsoft India Website. Passwords Exposed

WPSauce #-Link-Snipped-# that the individual pages of the website were still accessible while the website was under attack. We now assume that Microsoft's engineers have taken the control of the website and are performing the necessary security checks. It might take a while before the website to go live again. The intentions of the hack are still unknown.

Have you ever purchased anything from Microsoft India's online store? If yes, it might be a good idea to change your passwords right away. Microsoft surely needs to figure out the holes in the security systems they've placed. The hack could have been worse, had the credit card numbers and other personal details were exposed. What do our readers think about this hack?

Update: Microsoft India has sent following newsletter to customers -

Microsoft Store Customer Update

We are writing to inform you that there may have been unauthorized access to some of your customer account information on Microsoft Store India (#-Link-Snipped-#). We have confirmed that databases storing credit card details and payment information were not affected during this compromise. However, exposed account details may include non-financial related information including e-mail address, password, order details and shipping address.

Microsoft Store takes this situation very seriously, and the company is diligently working to remedy the issue and keep our customers protected. We need your help in this regard and we ask that you please take the following steps to prohibit any further unauthorized access to your information.

Precautions You Should Take

In order to secure your account information, Microsoft Store will take the action to re-set your password. Please follow these steps to ensure your privacy is protected:

1. If you use the same e-mail and password combination on any other sites, including non-Microsoft websites or services, you should proactively change the password immediately to ensure your personal information is protected.

2. You will receive an e-mail with a temporary password and a prompt to create a new password. Please note, the password reset relates only to Microsoft Store India.

3. Once you receive the e-mail you should immediately create a new password, one that is both secure and familiar to you.

Microsoft Store is Here to Help

We understand that you may have additional questions and Microsoft Store is here to help. If you have specific questions about your Microsoft Store account or want more information about computing and personal security please contact us at 1800-102

We apologize for any inconvenience this incident might cause.

Thank you,

Microsoft Store India