Microsoft site suffers security breach

A criminal investigation is under way into a break-in that took place last week on a Microsoft Web site for beta testers.

A criminal investigation is under way into a break-in that took place last week on a Microsoft Web site for beta testers.

The site, BetaPlace.com, is aimed at people who test Microsoft products. Unreleased versions of Windows and other Microsoft products are available at BetaPlace, as well as keys to activate the software, said one beta tester, who asked not to be named.

"We can confirm that there was an illegal intrusion last week," said a Microsoft spokeswoman. "Due to the ongoing criminal investigation and our desire to apprehend the person or persons responsible, we cannot comment further on any details."

Log-in credentials for at least one BetaPlace user were leaked and posted on the Internet, allowing nontesters to download unreleased versions of Microsoft software, according to the beta tester. The download server was shut down shortly after Microsoft discovered the leak and the passwords for all BetaPlace users were reset, according to the tester.

Microsoft contacted all BetaPlace users via e-mail and discussion groups, Microsoft said. The problem has been "fixed" and Microsoft is "instituting procedures to ensure an incident like this does not occur again," the spokeswoman said.

Read more on IT risk management

Start the conversation

Send me notifications when other members comment.

Please create a username to comment.

SearchCIO

SearchSecurity

SearchNetworking

SearchDataCenter

SearchDataManagement

Close