The company said it detected that a nation-state threat actor had gained access to and exfiltrated information from a very small percentage of employee email accounts, including those of senior leadership and employees in cybersecurity, legal and other functions, beginning in late November 2023.

1. 01

   The company said it detected that a nation-state threat actor had gained access to and exfiltrated information from a very small percentage of employee email accounts, including those of senior leadership and employees in cybersecurity, legal and other functions, beginning in late November 2023.

2. 02

   The company said that since the Original Filing, it has determined the threat actor used and continues to use information it obtained to gain, or attempt to gain, unauthorized access to some of its source code repositories and internal systems. It said it has found no evidence to date that Microsoft-hosted customer-facing systems have been compromised.

3. 03

   The company said Midnight Blizzard increased the volume of some aspects of the attack, such as password sprays, by as much as 10-fold in February, compared with the already large volume seen in January. It said it has been reaching out to customers whose shared secrets it found in exfiltrated email to help them take mitigating measures.

4. 04

   The company said it has increased its security investments and cross-enterprise coordination and continues to cooperate with federal law enforcement. As of the date of this filing, the incident has not had a material impact on its operations. It said it has not yet determined that the incident is reasonably likely to materially impact its financial condition or results of operations.

Analysis scope · Filing body and confirmed press-release exhibitWe analyzed the filing body and confirmed exhibits. This is not a review of other exhibits, investor presentations or the full earnings call.

AI summarized the filing and translated the summary into English; it may differ from the original. For reference only, not investment advice. AI translated the published Korean report into English. Figures are copied as filed, not recalculated.

Original filing

The filing as submitted to SEC EDGAR. You can check the figures and statements of this summary against it.