Hacking group Lapsus$ claims they leaked source code for Bing, Cortana and other projects stolen from Microsoft's internal Azure DevOps server.
Early Sunday morning, Lapsus$ posted a screenshot on its Telegram channel showing that they had hacked Microsoft's Azure DevOps server, which contained source code for Bing, Cortana, and various other internal projects.
On Monday night, Lapsus$ released a 7zip-compressed 9GB torrent file containing the source code for more than 250 projects they claim belong to Microsoft. When releasing the torrent file, the hacker group said it contained 90 percent of the Bing Maps dump log and about 45 percent of the Bing and Cortana dump log.
Although the hacking group said only part of the source code was leaked, IT media outlet BleepingComputer was told that the uncompressed archive contained approximately 37GB of source code that allegedly belonged to Microsoft.
Security researchers have carefully studied the leaked documents and said that this is source code from within Microsoft and obtained through official channels. Some of the leaked items contained emails and documents that they deduced to be used internally by Microsoft engineers to release mobile apps.
In addition, the leaked source code is only for web-based infrastructure, websites or mobile applications, and does not involve the source code of Microsoft desktop software (including Windows, Windows Server and Microsoft Office).
When BleepingComputer contacted Microsoft about the source code leak, Microsoft responded that they were aware of the situation and were investigating. However, Microsoft has stated that they do not rely on the security of source code protection products, so the impact of the leaked data on Microsoft should not be significant.