Microsoft (US)
Threat actors publicly named in connection with targeting Microsoft. Sorted by IDF score (rarity-weighted CVE attribution) with extraction confidence as tiebreaker. Each row's evidence is a verbatim quote from the source attribution.
5 attributed actor(s) ·
Category mix: criminal=2, competitor=2, hacktivist=1 ·
Attacker regions: International=2, US=1, EU=1, —=1
| Actor | Category | Sponsor | Confidence | Evidence | CVEs | IDF | Last active |
|---|---|---|---|---|---|---|---|
| LAPSUS$ (G1004) | criminal | — | 1.00 | Their victim list includes Microsoft, Okta, NVIDIA, Samsung, Uber, | 0 | 0.0 | — |
| LAPSUS$ (persona) (HACK-LAPSUS-HACKTIVIST) | criminal | — | 0.95 | claiming high-profile breaches at Microsoft, NVIDIA, Samsung, Okta | 0 | 0.0 | — |
| TomTom NV (Microsoft FAT32 / GPS patent dispute 2009) (COMP-TOMTOM-MICROSOFT-NAV) | competitor | 🇳🇱 NL | 0.95 | named as defendant by Microsoft in a March 2009 W.D. Wash. complaint over the FAT32 file system | 0 | 0.0 | — |
| Cult of the Dead Cow (cDc) (HACK-CULT-DEAD-COW) | hacktivist | 🇺🇸 US | 0.85 | released Back Orifice (1998) as anti-Microsoft commentary | 0 | 0.0 | — |
| Industrial espionage (competitor) | competitor | — | — | Aggregated trade-secret / talent-poaching cases — see the industrial-espionage record. | — | — | — |
Sibling victims
Other named victims whose attacker circle overlaps with this one — defenders use this to find sectoral or geographic cohorts that face the same actors.
- Samsung — 2 shared actor(s)
- Okta — 2 shared actor(s)
- NVIDIA — 2 shared actor(s)
- Olaplex — 1 shared actor(s)
- Adobe — 1 shared actor(s)
- TSMC — 1 shared actor(s)
- Thales — 1 shared actor(s)
- Cadence — 1 shared actor(s)
- Uber Eats — 1 shared actor(s)
- Postmates — 1 shared actor(s)
Public disclosure history
Official breach notifications filed by this organisation (SEC 8-K Item 1.05 + regulator enforcement). Distinct from the actor-attributed list above; surfaces the disclosures even when no public attribution exists.
| Disclosed | Filing |
|---|---|
| 2024-03-08 | SEC 8-K |
| 2024-01-19 | SEC 8-K |
« All victims · All actors · Browse by sector · Recent breach notifications