Ghost Service Accounts Enable M365 Data Theft in Chile

Summary

A security analysis has revealed that compromised Microsoft 365 environments in Chile are vulnerable to data theft through forgotten or lost service accounts. These accounts, often overlooked during security audits and employee offboarding, can retain access to sensitive data even when active user accounts are secured. This oversight allows threat actors to potentially exfiltrate large amounts of data by leveraging these persistent, ghost service accounts.

Entities