{"id":23594,"date":"2021-08-24T07:00:13","date_gmt":"2021-08-24T11:00:13","guid":{"rendered":"https:\/\/devopsnews.online\/?p=23594"},"modified":"2021-08-24T07:00:13","modified_gmt":"2021-08-24T11:00:13","slug":"38-million-data-records-exposed-in-microsoft-power-apps-misconfiguration","status":"publish","type":"post","link":"https:\/\/devopsnews.online\/38-million-data-records-exposed-in-microsoft-power-apps-misconfiguration\/","title":{"rendered":"38 million data records exposed in Microsoft Power Apps misconfiguration"},"content":{"rendered":"

It was recently reported that sensitive data have been exposed due to a misconfiguration in Microsoft Power Apps.<\/p>\n

Indeed, around 38 million data records including COVID-19 vaccination statuses, social security numbers, and email addresses were leaked via\u00a0Microsoft Power Apps portals configured to allow public access.<\/p>\n

It was stated that the data exposed impacted American Airlines, Microsoft, J.B. Hunt as well as governments of Indiana, Maryland, and New York City. The issue was first discovered on May 24 and a vulnerability report was submitted to Microsoft on June 24. The misconfiguration is due to the fact that all\u00a0data types were public when some should have definitely been private.<\/p>\n

There is still no information on whether the issue has been fixed or not.<\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

It was recently reported that sensitive data have been exposed due to a misconfiguration in Microsoft Power Apps. Indeed, around 38 million data records including COVID-19 vaccination statuses, social security numbers, and email addresses were leaked via\u00a0Microsoft Power Apps portals configured to allow public access. It was stated that the data exposed impacted American Airlines,…<\/p>\n","protected":false},"author":123458,"featured_media":23595,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"content-type":"","pmpro_default_level":"","footnotes":""},"categories":[3490,3239],"tags":[3597,448,67,112],"yoast_head":"\n38 million data records exposed in Microsoft Power Apps misconfiguration - DevOps Online North America<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/devopsnews.online\/38-million-data-records-exposed-in-microsoft-power-apps-misconfiguration\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"38 million data records exposed in Microsoft Power Apps misconfiguration - DevOps Online North America\" \/>\n<meta property=\"og:description\" content=\"It was recently reported that sensitive data have been exposed due to a misconfiguration in Microsoft Power Apps. Indeed, around 38 million data records including COVID-19 vaccination statuses, social security numbers, and email addresses were leaked via\u00a0Microsoft Power Apps portals configured to allow public access. It was stated that the data exposed impacted American Airlines,...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/devopsnews.online\/38-million-data-records-exposed-in-microsoft-power-apps-misconfiguration\/\" \/>\n<meta property=\"og:site_name\" content=\"DevOps Online North America\" \/>\n<meta property=\"article:published_time\" content=\"2021-08-24T11:00:13+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/devopsnews.online\/wp-content\/uploads\/2021\/08\/bernard-hermant-Kbm7HFC5Zbo-unsplash-scaled.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1707\" \/>\n\t<meta property=\"og:image:height\" content=\"2560\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Yashesh Patel\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@DevOpsAmerica\" \/>\n<meta name=\"twitter:site\" content=\"@DevOpsAmerica\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Yashesh Patel\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/devopsnews.online\/38-million-data-records-exposed-in-microsoft-power-apps-misconfiguration\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/devopsnews.online\/38-million-data-records-exposed-in-microsoft-power-apps-misconfiguration\/\"},\"author\":{\"name\":\"Yashesh Patel\",\"@id\":\"https:\/\/devopsnews.online\/#\/schema\/person\/1183cef5fa13624c55f3faf81f391435\"},\"headline\":\"38 million data records exposed in Microsoft Power Apps misconfiguration\",\"datePublished\":\"2021-08-24T11:00:13+00:00\",\"dateModified\":\"2021-08-24T11:00:13+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/devopsnews.online\/38-million-data-records-exposed-in-microsoft-power-apps-misconfiguration\/\"},\"wordCount\":131,\"publisher\":{\"@id\":\"https:\/\/devopsnews.online\/#organization\"},\"image\":{\"@id\":\"https:\/\/devopsnews.online\/38-million-data-records-exposed-in-microsoft-power-apps-misconfiguration\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/devopsnews.online\/wp-content\/uploads\/2021\/08\/bernard-hermant-Kbm7HFC5Zbo-unsplash-scaled.jpg\",\"keywords\":[\"cyber\",\"data\",\"DevOps\",\"security\"],\"articleSection\":[\"Data\",\"News\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/devopsnews.online\/38-million-data-records-exposed-in-microsoft-power-apps-misconfiguration\/\",\"url\":\"https:\/\/devopsnews.online\/38-million-data-records-exposed-in-microsoft-power-apps-misconfiguration\/\",\"name\":\"38 million data records exposed in Microsoft Power Apps misconfiguration - DevOps Online North America\",\"isPartOf\":{\"@id\":\"https:\/\/devopsnews.online\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/devopsnews.online\/38-million-data-records-exposed-in-microsoft-power-apps-misconfiguration\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/devopsnews.online\/38-million-data-records-exposed-in-microsoft-power-apps-misconfiguration\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/devopsnews.online\/wp-content\/uploads\/2021\/08\/bernard-hermant-Kbm7HFC5Zbo-unsplash-scaled.jpg\",\"datePublished\":\"2021-08-24T11:00:13+00:00\",\"dateModified\":\"2021-08-24T11:00:13+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/devopsnews.online\/38-million-data-records-exposed-in-microsoft-power-apps-misconfiguration\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/devopsnews.online\/38-million-data-records-exposed-in-microsoft-power-apps-misconfiguration\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/devopsnews.online\/38-million-data-records-exposed-in-microsoft-power-apps-misconfiguration\/#primaryimage\",\"url\":\"https:\/\/devopsnews.online\/wp-content\/uploads\/2021\/08\/bernard-hermant-Kbm7HFC5Zbo-unsplash-scaled.jpg\",\"contentUrl\":\"https:\/\/devopsnews.online\/wp-content\/uploads\/2021\/08\/bernard-hermant-Kbm7HFC5Zbo-unsplash-scaled.jpg\",\"width\":1707,\"height\":2560},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/devopsnews.online\/38-million-data-records-exposed-in-microsoft-power-apps-misconfiguration\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/devopsnews.online\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"38 million data records exposed in Microsoft Power Apps misconfiguration\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/devopsnews.online\/#website\",\"url\":\"https:\/\/devopsnews.online\/\",\"name\":\"DevOps Online North America\",\"description\":\"by 31 Media Ltd.\",\"publisher\":{\"@id\":\"https:\/\/devopsnews.online\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/devopsnews.online\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/devopsnews.online\/#organization\",\"name\":\"DevOps Online North America\",\"url\":\"https:\/\/devopsnews.online\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/devopsnews.online\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/devopsnews.online\/wp-content\/uploads\/2020\/03\/DevOpsOnline_email.png\",\"contentUrl\":\"https:\/\/devopsnews.online\/wp-content\/uploads\/2020\/03\/DevOpsOnline_email.png\",\"width\":198,\"height\":64,\"caption\":\"DevOps Online North America\"},\"image\":{\"@id\":\"https:\/\/devopsnews.online\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/x.com\/DevOpsAmerica\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/devopsnews.online\/#\/schema\/person\/1183cef5fa13624c55f3faf81f391435\",\"name\":\"Yashesh Patel\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/devopsnews.online\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/7133dcc024275e35cf81ef202ce76441?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/7133dcc024275e35cf81ef202ce76441?s=96&d=mm&r=g\",\"caption\":\"Yashesh Patel\"},\"sameAs\":[\"https:\/\/devopsnews.online\"],\"url\":\"https:\/\/devopsnews.online\/author\/yashesh-patel\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"38 million data records exposed in Microsoft Power Apps misconfiguration - DevOps Online North America","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/devopsnews.online\/38-million-data-records-exposed-in-microsoft-power-apps-misconfiguration\/","og_locale":"en_US","og_type":"article","og_title":"38 million data records exposed in Microsoft Power Apps misconfiguration - DevOps Online North America","og_description":"It was recently reported that sensitive data have been exposed due to a misconfiguration in Microsoft Power Apps. Indeed, around 38 million data records including COVID-19 vaccination statuses, social security numbers, and email addresses were leaked via\u00a0Microsoft Power Apps portals configured to allow public access. It was stated that the data exposed impacted American Airlines,...","og_url":"https:\/\/devopsnews.online\/38-million-data-records-exposed-in-microsoft-power-apps-misconfiguration\/","og_site_name":"DevOps Online North America","article_published_time":"2021-08-24T11:00:13+00:00","og_image":[{"width":1707,"height":2560,"url":"https:\/\/devopsnews.online\/wp-content\/uploads\/2021\/08\/bernard-hermant-Kbm7HFC5Zbo-unsplash-scaled.jpg","type":"image\/jpeg"}],"author":"Yashesh Patel","twitter_card":"summary_large_image","twitter_creator":"@DevOpsAmerica","twitter_site":"@DevOpsAmerica","twitter_misc":{"Written by":"Yashesh Patel","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/devopsnews.online\/38-million-data-records-exposed-in-microsoft-power-apps-misconfiguration\/#article","isPartOf":{"@id":"https:\/\/devopsnews.online\/38-million-data-records-exposed-in-microsoft-power-apps-misconfiguration\/"},"author":{"name":"Yashesh Patel","@id":"https:\/\/devopsnews.online\/#\/schema\/person\/1183cef5fa13624c55f3faf81f391435"},"headline":"38 million data records exposed in Microsoft Power Apps misconfiguration","datePublished":"2021-08-24T11:00:13+00:00","dateModified":"2021-08-24T11:00:13+00:00","mainEntityOfPage":{"@id":"https:\/\/devopsnews.online\/38-million-data-records-exposed-in-microsoft-power-apps-misconfiguration\/"},"wordCount":131,"publisher":{"@id":"https:\/\/devopsnews.online\/#organization"},"image":{"@id":"https:\/\/devopsnews.online\/38-million-data-records-exposed-in-microsoft-power-apps-misconfiguration\/#primaryimage"},"thumbnailUrl":"https:\/\/devopsnews.online\/wp-content\/uploads\/2021\/08\/bernard-hermant-Kbm7HFC5Zbo-unsplash-scaled.jpg","keywords":["cyber","data","DevOps","security"],"articleSection":["Data","News"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/devopsnews.online\/38-million-data-records-exposed-in-microsoft-power-apps-misconfiguration\/","url":"https:\/\/devopsnews.online\/38-million-data-records-exposed-in-microsoft-power-apps-misconfiguration\/","name":"38 million data records exposed in Microsoft Power Apps misconfiguration - DevOps Online North America","isPartOf":{"@id":"https:\/\/devopsnews.online\/#website"},"primaryImageOfPage":{"@id":"https:\/\/devopsnews.online\/38-million-data-records-exposed-in-microsoft-power-apps-misconfiguration\/#primaryimage"},"image":{"@id":"https:\/\/devopsnews.online\/38-million-data-records-exposed-in-microsoft-power-apps-misconfiguration\/#primaryimage"},"thumbnailUrl":"https:\/\/devopsnews.online\/wp-content\/uploads\/2021\/08\/bernard-hermant-Kbm7HFC5Zbo-unsplash-scaled.jpg","datePublished":"2021-08-24T11:00:13+00:00","dateModified":"2021-08-24T11:00:13+00:00","breadcrumb":{"@id":"https:\/\/devopsnews.online\/38-million-data-records-exposed-in-microsoft-power-apps-misconfiguration\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/devopsnews.online\/38-million-data-records-exposed-in-microsoft-power-apps-misconfiguration\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/devopsnews.online\/38-million-data-records-exposed-in-microsoft-power-apps-misconfiguration\/#primaryimage","url":"https:\/\/devopsnews.online\/wp-content\/uploads\/2021\/08\/bernard-hermant-Kbm7HFC5Zbo-unsplash-scaled.jpg","contentUrl":"https:\/\/devopsnews.online\/wp-content\/uploads\/2021\/08\/bernard-hermant-Kbm7HFC5Zbo-unsplash-scaled.jpg","width":1707,"height":2560},{"@type":"BreadcrumbList","@id":"https:\/\/devopsnews.online\/38-million-data-records-exposed-in-microsoft-power-apps-misconfiguration\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/devopsnews.online\/"},{"@type":"ListItem","position":2,"name":"38 million data records exposed in Microsoft Power Apps misconfiguration"}]},{"@type":"WebSite","@id":"https:\/\/devopsnews.online\/#website","url":"https:\/\/devopsnews.online\/","name":"DevOps Online North America","description":"by 31 Media Ltd.","publisher":{"@id":"https:\/\/devopsnews.online\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/devopsnews.online\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/devopsnews.online\/#organization","name":"DevOps Online North America","url":"https:\/\/devopsnews.online\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/devopsnews.online\/#\/schema\/logo\/image\/","url":"https:\/\/devopsnews.online\/wp-content\/uploads\/2020\/03\/DevOpsOnline_email.png","contentUrl":"https:\/\/devopsnews.online\/wp-content\/uploads\/2020\/03\/DevOpsOnline_email.png","width":198,"height":64,"caption":"DevOps Online North America"},"image":{"@id":"https:\/\/devopsnews.online\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/DevOpsAmerica"]},{"@type":"Person","@id":"https:\/\/devopsnews.online\/#\/schema\/person\/1183cef5fa13624c55f3faf81f391435","name":"Yashesh Patel","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/devopsnews.online\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/7133dcc024275e35cf81ef202ce76441?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/7133dcc024275e35cf81ef202ce76441?s=96&d=mm&r=g","caption":"Yashesh Patel"},"sameAs":["https:\/\/devopsnews.online"],"url":"https:\/\/devopsnews.online\/author\/yashesh-patel\/"}]}},"_links":{"self":[{"href":"https:\/\/devopsnews.online\/wp-json\/wp\/v2\/posts\/23594"}],"collection":[{"href":"https:\/\/devopsnews.online\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devopsnews.online\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devopsnews.online\/wp-json\/wp\/v2\/users\/123458"}],"replies":[{"embeddable":true,"href":"https:\/\/devopsnews.online\/wp-json\/wp\/v2\/comments?post=23594"}],"version-history":[{"count":1,"href":"https:\/\/devopsnews.online\/wp-json\/wp\/v2\/posts\/23594\/revisions"}],"predecessor-version":[{"id":23596,"href":"https:\/\/devopsnews.online\/wp-json\/wp\/v2\/posts\/23594\/revisions\/23596"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devopsnews.online\/wp-json\/wp\/v2\/media\/23595"}],"wp:attachment":[{"href":"https:\/\/devopsnews.online\/wp-json\/wp\/v2\/media?parent=23594"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devopsnews.online\/wp-json\/wp\/v2\/categories?post=23594"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devopsnews.online\/wp-json\/wp\/v2\/tags?post=23594"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}