Microsoft — Storm-2139 hijacked Azure OpenAI accounts and sold jailbroken access
Date: 2025-02
Affected: Microsoft Azure OpenAI Service
Attack vector: auth-bypass
Category: threat-report
Severity: Critical

Microsoft's DCU named cybercrime group Storm-2139, which compromised Azure OpenAI customer credentials via leaked keys, jailbroke the models to bypass content safety, and resold access for producing non-consensual explicit images and other policy-violating content. Microsoft pursued civil litigation.


Mitigations:

Architectural layers (MAESTRO):