Some Microsoft source code and confidential information leaked in violent attack by Russian APT group

Microsoft disclosed on Friday (March 8) that Midnight Blizzard (aka APT29 or Cozy Bear), an APT group with a Russian background, accessed some of Microsoft's source code repositories and internal systems during the January 2024 hacking incident, but no security incidents were found to have occurred on Microsoft hosted systems or users. Meanwhile the company noted that it has been discovered in recent weeks that Midnight Storm is using previously stolen information to try to gain unauthorized access. Microsoft is continuing to investigate the scope of the security breach and has communicated with users who may have been affected, but has not released to the public exactly what source code and confidential information was stolen.