{"id":27634,"date":"2024-04-03T10:41:50","date_gmt":"2024-04-03T10:41:50","guid":{"rendered":"https:\/\/one.sightlinemg.com\/federaltimes\/uncategorized\/2024\/04\/03\/microsoft-ripped-over-shoddy-security-in-chinese-hack-of-feds\/"},"modified":"2026-08-08T05:07:48","modified_gmt":"2026-08-08T05:07:48","slug":"microsoft-ripped-over-shoddy-security-in-chinese-hack-of-feds","status":"publish","type":"post","link":"https:\/\/one.sightlinemg.com\/federaltimes\/it-networks\/cybersecurity\/2024\/04\/03\/microsoft-ripped-over-shoddy-security-in-chinese-hack-of-feds\/","title":{"rendered":"Microsoft ripped over shoddy security in Chinese hack of feds"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">In a scathing indictment of Microsoft corporate security and transparency, a Biden administration-appointed review board <a href=\"https:\/\/www.cisa.gov\/resources-tools\/resources\/cyber-safety-review-board-releases-report-microsoft-online-exchange-incident-summer-2023\">issued a report Tuesday<\/a> saying \u201ca cascade of errors\u201d by the tech giant let state-backed Chinese cyber operators break into email accounts of senior U.S. officials including Commerce Secretary Gina Raimondo.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The Cyber Safety Review Board, created in 2021 by executive order, describes shoddy cybersecurity practices, a lax corporate culture and a lack of sincerity about the company\u2019s knowledge of the targeted breach, which affected multiple U.S. agencies that deal with China.<\/p>\n\n\n\t<aside class=\"smg-interstitial-link wp-block-smg-interstitial-link\">\n\t\t<a href=\"https:\/\/one.sightlinemg.com\/federaltimes\/acquisition\/2022\/12\/07\/amazon-google-microsoft-and-oracle-picked-for-9b-jedi-successor\/\" class=\"smg-interstitial-link__inner\">\n\t\t\t\t\t\t\t<div class=\"smg-interstitial-link__media\">\n\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"300\" height=\"200\" src=\"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/Department-of-Defense-Pentagon-Logo.jpg.jpg?w=300\" class=\"smg-interstitial-link__image wp-post-image\" alt=\"\" \/>\t\t\t\t<\/div>\n\t\t\t\t\t\t<div class=\"smg-interstitial-link__content\">\n\t\t\t\t<span class=\"smg-interstitial-link__kicker\">Related<\/span>\n\t\t\t\t<h3 class=\"smg-interstitial-link__title\">Amazon, Google, Microsoft and Oracle picked for $9B JEDI successor<\/h3>\n\t\t\t\t\t\t\t\t\t<p class=\"smg-interstitial-link__excerpt\">The selections for the Joint Warfighting Cloud Capability, or JWCC, were made public Wednesday in a list of contracts published by the Pentagon.<\/p>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/a>\n\t<\/aside>\n\t\n\n\n<p class=\"wp-block-paragraph\">It concluded that \u201cMicrosoft\u2019s security culture was inadequate and requires an overhaul\u201d given the company\u2019s ubiquity and critical role in the global technology ecosystem. The company\u2019s products \u201cunderpin essential services that support national security, the foundations of our economy, and public health and safety.\u201d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The panel said the intrusion, <a href=\"https:\/\/apnews.com\/article\/microsoft-china-hackers-breach-emails-9f774ea07a2857bfc05d17a261e7a705\">discovered in June by the State Department<\/a> and dating to May \u201cwas preventable and should never have occurred,\u201d blaming its success on \u201ca cascade of avoidable errors.\u201d What\u2019s more, the board said, Microsoft still doesn\u2019t know how the hackers got in.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The panel made sweeping recommendations, including urging Microsoft to put on hold adding features to its cloud computing environment until \u201csubstantial security improvements have been made.\u201d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">It said Microsoft\u2019s CEO and board should institute \u201crapid cultural change\u201d including publicly sharing \u201ca plan with specific timelines to make fundamental, security-focused reforms across the company and its full suite of products.\u201d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In a statement, Microsoft said it appreciated the board\u2019s investigation and would \u201ccontinue to harden all our systems against attack and implement even more robust sensors and logs to help us detect and repel the cyber-armies of our adversaries.\u201d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In all, the state-backed Chinese hackers broke into the Microsoft Exchange Online email of 22 organizations and more than 500 individuals around the world including the U.S. ambassador to China, Nicholas Burns \u2014 accessing some cloud-based email boxes for at least six weeks and downloading some 60,000 emails from the State Department alone, the 34-page report said. Three think tanks and four foreign government entities, including Britain\u2019s National Cyber Security Center, were among those compromised, it said.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The board, convened by Homeland Security Secretary Alejandro Mayorkas in August, accused Microsoft of making inaccurate public statements about the incident \u2014 including issuing a statement saying it believed it had determined the likely root cause of the intrusion \u201cwhen, in fact, it still has not.\u201d Microsoft did not update that misleading blog post, published in September, until mid-March after the board repeatedly asked if it planned to issue a correction, it said.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Separately, the board expressed concern about a separate hack disclosed by the Redmond, Washington-based company in January \u2014 this one of email accounts including those of an undisclosed number of senior Microsoft executives and an undisclosed number of Microsoft customers and attributed to state-backed Russian hackers.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The board lamented \u201ca corporate culture that deprioritized both enterprise security investments and rigorous risk management.\u201d<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"3614\" height=\"2409\" src=\"\/wp-content\/uploads\/2026\/08\/AP24094059591516.jpg.jpg\" alt=\"\" class=\"wp-image-79391\" srcset=\"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/AP24094059591516.jpg.jpg 3614w, https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/AP24094059591516.jpg.jpg?resize=300,200 300w, https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/AP24094059591516.jpg.jpg?resize=768,512 768w, https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/AP24094059591516.jpg.jpg?resize=1024,683 1024w, https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/AP24094059591516.jpg.jpg?resize=1536,1024 1536w, https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/AP24094059591516.jpg.jpg?resize=2048,1365 2048w\" sizes=\"auto, (max-width: 3614px) 100vw, 3614px\" \/><figcaption class=\"wp-element-caption\">FILE &#8211; The Microsoft logo is seen in Issy-les-Moulineaux, outside Paris, France, April 12, 2016. In a scathing indictment of Microsoft corporate security and transparency, a Biden administration-appointed review board issued a report Tuesday, April 2, 2024, saying \u201ca cascade of errors\u201d by the tech giant let state-backed Chinese cyber operators break into email accounts of senior U.S. officials including Commerce Secretary Gina Raimondo.  (AP Photo\/Michel Euler, File)<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">The Chinese hack was initially disclosed in July by Microsoft <a href=\"https:\/\/msrc.microsoft.com\/blog\/2023\/07\/microsoft-mitigates-china-based-threat-actor-storm-0558-targeting-of-customer-email\/\">in a blog post<\/a> and carried out by a group the company calls Storm-0558. That same group, the panel noted, has been engaged in similar intrusions \u2014 compromising cloud providers or stealing authentication keys so it can break into accounts \u2014 since at least 2009, targeting companies including Google, Yahoo, Adobe, Dow Chemical and Morgan Stanley.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Microsoft noted in its statement that the hackers involved are \u201cwell-resourced nation state threat actors who operate continuously and without meaningful deterrence.\u201d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The company said it recognizes that recent events \u201chave demonstrated a need to adopt a new culture of engineering security in our own networks,\u201d adding it has \u201cmobilized our engineering teams to identify and mitigate legacy infrastructure, improve processes, and enforce security benchmarks.\u201d<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The hack was initially disclosed in July by Microsoft in a blog post and carried out by a group the company calls Storm-0558.<\/p>\n","protected":false},"author":7,"featured_media":79386,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_yoast_wpseo_meta-robots-noindex":"","_yoast_wpseo_meta-robots-nofollow":"","_yoast_wpseo_canonical":"","_acf":"","_yoast_wpseo_primary_category":113,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","_smg_distribution_targets":{"9":{"categories":["cyber","home"],"primary_category":"cyber"}}},"categories":[60,113,39,12,31,14,9],"tags":[],"coauthors":[3222],"class_list":["post-27634","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-contracting","category-cybersecurity","category-doj-fbi","category-govcon","category-home","category-it-networks","category-federal-oversight"],"acf":{"subheadline":"","legacy_arc_id":"VNAQQUHOLVHMTG2ZHSMQ4LGFJI","arc_canonical_url":"\/it-networks\/cybersecurity\/2024\/04\/03\/microsoft-ripped-over-shoddy-security-in-chinese-hack-of-feds\/","remove_feature_photo":false,"is_sponsored":false,"subtype":"","redirect_url":"","disable_inline_ads":false,"native_logo_pretext":"Presented By:"},"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.0 (Yoast SEO v28.1) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Microsoft ripped over shoddy security in Chinese hack of feds - Federal Times<\/title>\n<meta name=\"description\" content=\"The hack was initially disclosed in July by Microsoft in a blog post and carried out by a group the company calls Storm-0558.\" \/>\n<meta name=\"robots\" content=\"noindex, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Microsoft ripped over shoddy security in Chinese hack of feds\" \/>\n<meta property=\"og:description\" content=\"The hack was initially disclosed in July by Microsoft in a blog post and carried out by a group the company calls Storm-0558.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/one.sightlinemg.com\/federaltimes\/it-networks\/cybersecurity\/2024\/04\/03\/microsoft-ripped-over-shoddy-security-in-chinese-hack-of-feds\/\" \/>\n<meta property=\"og:site_name\" content=\"Federal Times\" \/>\n<meta property=\"article:published_time\" content=\"2024-04-03T10:41:50+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-08T05:07:48+00:00\" \/>\n<meta name=\"author\" content=\"Frank Bajak, The Associated Press\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Frank Bajak, The Associated Press\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\n\t    \"@context\": \"https:\\\/\\\/schema.org\",\n\t    \"@graph\": [\n\t        {\n\t            \"@type\": \"Article\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/it-networks\\\/cybersecurity\\\/2024\\\/04\\\/03\\\/microsoft-ripped-over-shoddy-security-in-chinese-hack-of-feds\\\/#article\",\n\t            \"isPartOf\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/it-networks\\\/cybersecurity\\\/2024\\\/04\\\/03\\\/microsoft-ripped-over-shoddy-security-in-chinese-hack-of-feds\\\/\"\n\t            },\n\t            \"author\": {\n\t                \"name\": \"migration\",\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#\\\/schema\\\/person\\\/cc76c831bb37a926738c8391fca7a3b1\"\n\t            },\n\t            \"headline\": \"Microsoft ripped over shoddy security in Chinese hack of feds\",\n\t            \"datePublished\": \"2024-04-03T10:41:50+00:00\",\n\t            \"dateModified\": \"2026-08-08T05:07:48+00:00\",\n\t            \"mainEntityOfPage\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/it-networks\\\/cybersecurity\\\/2024\\\/04\\\/03\\\/microsoft-ripped-over-shoddy-security-in-chinese-hack-of-feds\\\/\"\n\t            },\n\t            \"wordCount\": 696,\n\t            \"commentCount\": 0,\n\t            \"publisher\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#organization\"\n\t            },\n\t            \"image\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/it-networks\\\/cybersecurity\\\/2024\\\/04\\\/03\\\/microsoft-ripped-over-shoddy-security-in-chinese-hack-of-feds\\\/#primaryimage\"\n\t            },\n\t            \"thumbnailUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/AP24094061722455.jpg.jpg\",\n\t            \"articleSection\": [\n\t                \"Contracting\",\n\t                \"Cybersecurity\",\n\t                \"DOJ\\\/FBI\",\n\t                \"GovCon\",\n\t                \"Home\",\n\t                \"IT &amp; Networks\",\n\t                \"Oversight\"\n\t            ],\n\t            \"inLanguage\": \"en-US\",\n\t            \"potentialAction\": [\n\t                {\n\t                    \"@type\": \"CommentAction\",\n\t                    \"name\": \"Comment\",\n\t                    \"target\": [\n\t                        \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/it-networks\\\/cybersecurity\\\/2024\\\/04\\\/03\\\/microsoft-ripped-over-shoddy-security-in-chinese-hack-of-feds\\\/#respond\"\n\t                    ]\n\t                }\n\t            ]\n\t        },\n\t        {\n\t            \"@type\": \"WebPage\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/it-networks\\\/cybersecurity\\\/2024\\\/04\\\/03\\\/microsoft-ripped-over-shoddy-security-in-chinese-hack-of-feds\\\/\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/it-networks\\\/cybersecurity\\\/2024\\\/04\\\/03\\\/microsoft-ripped-over-shoddy-security-in-chinese-hack-of-feds\\\/\",\n\t            \"name\": \"Microsoft ripped over shoddy security in Chinese hack of feds - Federal Times\",\n\t            \"isPartOf\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#website\"\n\t            },\n\t            \"primaryImageOfPage\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/it-networks\\\/cybersecurity\\\/2024\\\/04\\\/03\\\/microsoft-ripped-over-shoddy-security-in-chinese-hack-of-feds\\\/#primaryimage\"\n\t            },\n\t            \"image\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/it-networks\\\/cybersecurity\\\/2024\\\/04\\\/03\\\/microsoft-ripped-over-shoddy-security-in-chinese-hack-of-feds\\\/#primaryimage\"\n\t            },\n\t            \"thumbnailUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/AP24094061722455.jpg.jpg\",\n\t            \"datePublished\": \"2024-04-03T10:41:50+00:00\",\n\t            \"dateModified\": \"2026-08-08T05:07:48+00:00\",\n\t            \"description\": \"The hack was initially disclosed in July by Microsoft in a blog post and carried out by a group the company calls Storm-0558.\",\n\t            \"breadcrumb\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/it-networks\\\/cybersecurity\\\/2024\\\/04\\\/03\\\/microsoft-ripped-over-shoddy-security-in-chinese-hack-of-feds\\\/#breadcrumb\"\n\t            },\n\t            \"inLanguage\": \"en-US\",\n\t            \"potentialAction\": [\n\t                {\n\t                    \"@type\": \"ReadAction\",\n\t                    \"target\": [\n\t                        \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/it-networks\\\/cybersecurity\\\/2024\\\/04\\\/03\\\/microsoft-ripped-over-shoddy-security-in-chinese-hack-of-feds\\\/\"\n\t                    ]\n\t                }\n\t            ]\n\t        },\n\t        {\n\t            \"@type\": \"ImageObject\",\n\t            \"inLanguage\": \"en-US\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/it-networks\\\/cybersecurity\\\/2024\\\/04\\\/03\\\/microsoft-ripped-over-shoddy-security-in-chinese-hack-of-feds\\\/#primaryimage\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/AP24094061722455.jpg.jpg\",\n\t            \"contentUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/AP24094061722455.jpg.jpg\"\n\t        },\n\t        {\n\t            \"@type\": \"BreadcrumbList\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/it-networks\\\/cybersecurity\\\/2024\\\/04\\\/03\\\/microsoft-ripped-over-shoddy-security-in-chinese-hack-of-feds\\\/#breadcrumb\",\n\t            \"itemListElement\": [\n\t                {\n\t                    \"@type\": \"ListItem\",\n\t                    \"position\": 1,\n\t                    \"name\": \"Home\",\n\t                    \"item\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/\",\n\t                    \"ad_zone\": \"home\"\n\t                },\n\t                {\n\t                    \"@type\": \"ListItem\",\n\t                    \"position\": 2,\n\t                    \"name\": \"IT &amp; Networks\",\n\t                    \"item\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/it-networks\\\/\",\n\t                    \"ad_zone\": \"it-networks\"\n\t                },\n\t                {\n\t                    \"@type\": \"ListItem\",\n\t                    \"position\": 3,\n\t                    \"name\": \"Cybersecurity\",\n\t                    \"item\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/it-networks\\\/cybersecurity\\\/\",\n\t                    \"ad_zone\": \"cybersecurity\"\n\t                },\n\t                {\n\t                    \"@type\": \"ListItem\",\n\t                    \"position\": 4,\n\t                    \"name\": \"Microsoft ripped over shoddy security in Chinese hack of feds\"\n\t                }\n\t            ]\n\t        },\n\t        {\n\t            \"@type\": \"WebSite\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#website\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/\",\n\t            \"name\": \"Federal Times\",\n\t            \"description\": \"Federal Times\",\n\t            \"publisher\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#organization\"\n\t            },\n\t            \"potentialAction\": [\n\t                {\n\t                    \"@type\": \"SearchAction\",\n\t                    \"target\": {\n\t                        \"@type\": \"EntryPoint\",\n\t                        \"urlTemplate\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/?s={search_term_string}\"\n\t                    },\n\t                    \"query-input\": {\n\t                        \"@type\": \"PropertyValueSpecification\",\n\t                        \"valueRequired\": true,\n\t                        \"valueName\": \"search_term_string\"\n\t                    }\n\t                }\n\t            ],\n\t            \"inLanguage\": \"en-US\"\n\t        },\n\t        {\n\t            \"@type\": \"Organization\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#organization\",\n\t            \"name\": \"Federal Times\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/\",\n\t            \"logo\": {\n\t                \"@type\": \"ImageObject\",\n\t                \"inLanguage\": \"en-US\",\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#\\\/schema\\\/logo\\\/image\\\/\",\n\t                \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/federal-logo-white.png\",\n\t                \"contentUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/federal-logo-white.png\",\n\t                \"caption\": \"Federal Times\"\n\t            },\n\t            \"image\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#\\\/schema\\\/logo\\\/image\\\/\"\n\t            }\n\t        },\n\t        {\n\t            \"@type\": \"Person\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#\\\/schema\\\/person\\\/cc76c831bb37a926738c8391fca7a3b1\",\n\t            \"name\": \"migration\",\n\t            \"image\": {\n\t                \"@type\": \"ImageObject\",\n\t                \"inLanguage\": \"en-US\",\n\t                \"@id\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=gcf4cb6ee0ec29e49e7a963234e4340ec\",\n\t                \"url\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g\",\n\t                \"contentUrl\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g\",\n\t                \"caption\": \"migration\"\n\t            },\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/author\\\/migration\\\/\"\n\t        }\n\t    ]\n\t}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Microsoft ripped over shoddy security in Chinese hack of feds - Federal Times","description":"The hack was initially disclosed in July by Microsoft in a blog post and carried out by a group the company calls Storm-0558.","robots":{"index":"noindex","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"en_US","og_type":"article","og_title":"Microsoft ripped over shoddy security in Chinese hack of feds","og_description":"The hack was initially disclosed in July by Microsoft in a blog post and carried out by a group the company calls Storm-0558.","og_url":"https:\/\/one.sightlinemg.com\/federaltimes\/it-networks\/cybersecurity\/2024\/04\/03\/microsoft-ripped-over-shoddy-security-in-chinese-hack-of-feds\/","og_site_name":"Federal Times","article_published_time":"2024-04-03T10:41:50+00:00","article_modified_time":"2026-08-08T05:07:48+00:00","author":"Frank Bajak, The Associated Press","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Frank Bajak, The Associated Press","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/it-networks\/cybersecurity\/2024\/04\/03\/microsoft-ripped-over-shoddy-security-in-chinese-hack-of-feds\/#article","isPartOf":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/it-networks\/cybersecurity\/2024\/04\/03\/microsoft-ripped-over-shoddy-security-in-chinese-hack-of-feds\/"},"author":{"name":"migration","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#\/schema\/person\/cc76c831bb37a926738c8391fca7a3b1"},"headline":"Microsoft ripped over shoddy security in Chinese hack of feds","datePublished":"2024-04-03T10:41:50+00:00","dateModified":"2026-08-08T05:07:48+00:00","mainEntityOfPage":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/it-networks\/cybersecurity\/2024\/04\/03\/microsoft-ripped-over-shoddy-security-in-chinese-hack-of-feds\/"},"wordCount":696,"commentCount":0,"publisher":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#organization"},"image":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/it-networks\/cybersecurity\/2024\/04\/03\/microsoft-ripped-over-shoddy-security-in-chinese-hack-of-feds\/#primaryimage"},"thumbnailUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/AP24094061722455.jpg.jpg","articleSection":["Contracting","Cybersecurity","DOJ\/FBI","GovCon","Home","IT &amp; Networks","Oversight"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/one.sightlinemg.com\/federaltimes\/it-networks\/cybersecurity\/2024\/04\/03\/microsoft-ripped-over-shoddy-security-in-chinese-hack-of-feds\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/it-networks\/cybersecurity\/2024\/04\/03\/microsoft-ripped-over-shoddy-security-in-chinese-hack-of-feds\/","url":"https:\/\/one.sightlinemg.com\/federaltimes\/it-networks\/cybersecurity\/2024\/04\/03\/microsoft-ripped-over-shoddy-security-in-chinese-hack-of-feds\/","name":"Microsoft ripped over shoddy security in Chinese hack of feds - Federal Times","isPartOf":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#website"},"primaryImageOfPage":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/it-networks\/cybersecurity\/2024\/04\/03\/microsoft-ripped-over-shoddy-security-in-chinese-hack-of-feds\/#primaryimage"},"image":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/it-networks\/cybersecurity\/2024\/04\/03\/microsoft-ripped-over-shoddy-security-in-chinese-hack-of-feds\/#primaryimage"},"thumbnailUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/AP24094061722455.jpg.jpg","datePublished":"2024-04-03T10:41:50+00:00","dateModified":"2026-08-08T05:07:48+00:00","description":"The hack was initially disclosed in July by Microsoft in a blog post and carried out by a group the company calls Storm-0558.","breadcrumb":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/it-networks\/cybersecurity\/2024\/04\/03\/microsoft-ripped-over-shoddy-security-in-chinese-hack-of-feds\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/one.sightlinemg.com\/federaltimes\/it-networks\/cybersecurity\/2024\/04\/03\/microsoft-ripped-over-shoddy-security-in-chinese-hack-of-feds\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/it-networks\/cybersecurity\/2024\/04\/03\/microsoft-ripped-over-shoddy-security-in-chinese-hack-of-feds\/#primaryimage","url":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/AP24094061722455.jpg.jpg","contentUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/AP24094061722455.jpg.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/it-networks\/cybersecurity\/2024\/04\/03\/microsoft-ripped-over-shoddy-security-in-chinese-hack-of-feds\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/one.sightlinemg.com\/federaltimes\/","ad_zone":"home"},{"@type":"ListItem","position":2,"name":"IT &amp; Networks","item":"https:\/\/one.sightlinemg.com\/federaltimes\/it-networks\/","ad_zone":"it-networks"},{"@type":"ListItem","position":3,"name":"Cybersecurity","item":"https:\/\/one.sightlinemg.com\/federaltimes\/it-networks\/cybersecurity\/","ad_zone":"cybersecurity"},{"@type":"ListItem","position":4,"name":"Microsoft ripped over shoddy security in Chinese hack of feds"}]},{"@type":"WebSite","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#website","url":"https:\/\/one.sightlinemg.com\/federaltimes\/","name":"Federal Times","description":"Federal Times","publisher":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/one.sightlinemg.com\/federaltimes\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#organization","name":"Federal Times","url":"https:\/\/one.sightlinemg.com\/federaltimes\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#\/schema\/logo\/image\/","url":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/06\/federal-logo-white.png","contentUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/06\/federal-logo-white.png","caption":"Federal Times"},"image":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#\/schema\/person\/cc76c831bb37a926738c8391fca7a3b1","name":"migration","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=gcf4cb6ee0ec29e49e7a963234e4340ec","url":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g","caption":"migration"},"url":"https:\/\/one.sightlinemg.com\/federaltimes\/author\/migration\/"}]}},"jetpack_sharing_enabled":true,"distributor_meta":false,"distributor_terms":false,"distributor_media":false,"distributor_original_site_name":"Federal Times","distributor_original_site_url":"https:\/\/one.sightlinemg.com\/federaltimes","push-errors":false,"jetpack_featured_media_url":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/AP24094061722455.jpg.jpg","_links":{"self":[{"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/posts\/27634","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/comments?post=27634"}],"version-history":[{"count":2,"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/posts\/27634\/revisions"}],"predecessor-version":[{"id":37530,"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/posts\/27634\/revisions\/37530"}],"wp:attachment":[{"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/media?parent=27634"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/categories?post=27634"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/tags?post=27634"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/coauthors?post=27634"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}