Microsoft says it knew of hacker all along

By GENE JOHNSON

Associated Press

SEATTLE — A hacker had high-level access to Microsoft Corp.’s computer system for 12 days — not up to five weeks, as the company had first reported — and was monitored the entire time.

While the company says it believes no major corporate secrets were stolen, some security experts believe the 12-day period was plenty of time for a hacker to do damage that may not have been detected yet.

Microsoft spokesman Rick Miller said Sunday that beginning Oct. 14 a hacker gained access to high-level secrets and that at some point over the next 12 days viewed blueprints, or source code, for Microsoft software that is being developed.

When it confirmed the incident Friday, the software giant based in Redmond, a Seattle suburb, said an electronic intruder had access to source code for as long as five weeks. Microsoft used that time estimate because the duration of the hacker’s presence was unclear and the company wanted to be sure it did not underestimate the problem, Miller said.

The company was alerted to the break-in by the creation of new accounts giving users access to parts of Microsoft’s computer network, Miller said.

"We start seeing these new accounts being created, but that could be an anomaly of the system," Miller said. "After a day or two, we realized it was someone hacking into the system."

It was not until Oct. 26, however, that the company notified federal law enforcement, which is investigating the matter. Microsoft said it initially planned to handle the break-in on its own.

"We realized the intrusion had grown to the level that warranted bringing in the FBI," Miller said. Miller said the activity did not corrupt or modify the code for the product, which he declined to identify.

If any attempts to download or transfer the source code were made, such activity was not recorded in Microsoft’s logs, Miller said, adding that it is extremely unlikely any source code files were copied because of their immense size.

But some security experts questioned that assessment.

"It’s impossible to say with absolute certainty that (source code) file has not been copied," according to Simon Perry, vice president of security solutions at Computer Associates International in Islandia, N.Y. "Over a 12-day period, it would be absolutely possible to take a copy of that."

Ray Pompon of Seattle-based Conjungi Networks, which installed some security tools for Microsoft in 1994, agreed, saying, "Source code files can be very big, but they’re easily compressible."

Microsoft has refused to say at what point it learned the hacker saw the source codes. Pompon said whether the company discovered it immediately would depend on what type of monitoring it was doing — something the company has not disclosed.

Miller acknowledged the hacker could have been in the system for longer than 12 days, but he said the company is confident that high-level access occurred only between Oct. 14 and Oct. 25.

But even with low-level access, the hacker could have accessed corporate e-mails and other confidential information, Miller said.

Microsoft has refused to identify what program the source code was for, except to say it was a product years from release — not Windows or Office software.

Pompon said it’s less damaging to Microsoft that the product was not one already on the market. "Microsoft can be more careful about what they’re going to release and make sure it’s not vulnerable," he said.

Microsoft’s source codes are the most coveted in the multibillion-dollar industry.

With access to software blueprints, competitors could write programs that undermine Microsoft or use the data to identify weaknesses, making computer break-ins and virus-writing easier.

Copyright ©2000 Associated Press. All rights reserved. This material may not be published, broadcast, rewritten, or redistributed.

Talk to us

> Give us your news tips.

> Send us a letter to the editor.

> More Herald contact information.

More in Local News

Customers enter and exit the Costco on Dec. 2, 2022, in Lake Stevens. (Olivia Vanni / The Herald)
Costco stores could be impacted by looming truck driver strike threat

Truck drivers who deliver groceries and produce to Costco warehouses… Continue reading

Two Washington State ferries pass along the route between Mukilteo and Clinton as scuba divers swim near the shore Sunday, Oct. 22, 2023, in Mukilteo, Washington. (Ryan Berry / The Herald)
Ferry system increases ridership by a half million in 2024

Edmonds-Kingston route remains second-busiest route in the system.

Three injured after high-speed, head-on collision on Highway 522

Washington State Patrol is investigating the crash that happened before 4:30 p.m. on Monday.

Fernando Espinoza salts the sidewalk along Fifth Avenue South on Thursday, Feb. 6, 2025 in Edmonds, Washington. (Olivia Vanni / The Herald)
Think this is cold, Snohomish County? Wait until Tuesday

Tuesday could bring dangerous wind chill during the day and an overnight low of 19 degrees

Robin Cain with 50 of her marathon medals hanging on a display board she made with her father on Thursday, Jan. 2, 2025 in Lake Stevens, Washington. (Olivia Vanni / The Herald)
Running a marathon is hard. She ran one in every state.

Robin Cain, of Lake Stevens, is one of only a few thousand people to ever achieve the feat.

People line up to grab food at the Everett Recovery Cafe on Wednesday, Dec. 4, 2024 in Everett, Washington. (Olivia Vanni / The Herald)
Coffee, meals and compassion are free at the Everett Recovery Cafe

The free, membership-based day center offers free coffee and meals and more importantly, camaraderie and recovery support.

Devani Padron, left, Daisy Ramos perform during dance class at Mari's Place Monday afternoon in Everett on July 13, 2016. (Kevin Clark / The Herald)
Mari’s Place helps children build confidence and design a better future

The Everett-based nonprofit offers free and low-cost classes in art, music, theater and dance for children ages 5 to 14.

The Everett Wastewater Treatment Plant along the Snohomish River on Thursday, June 16, 2022 in Everett, Washington. (Olivia Vanni / The Herald)
Everett water, sewer rates could jump 43% by 2028

The rate hikes would pay for improvements to the city’s sewer infrastructure.

The bond funded new track and field at Northshore Middle School on Thursday, Oct. 24, 2024 in Bothell, Washington. (Courtesy of Northshore School District)
Northshore School District bond improvements underway

The $425 million bond is funding new track and field complexes, playgrounds and phase one of two school replacements.

The Washington State Department of Licensing office is seen in 2018 in Seattle. (Sue Misao / The Herald)
Drivers licensing offices to close Feb. 14-17

Online services are also not available Feb. 10-17. The Washington State Department of Licensing said the move is necessary to upgrade software.

Pharmacist Nisha Mathew prepares a Pfizer COVID booster shot for a patient at Bartell Drugs on Broadway on Saturday, Oct. 1, 2022, in Everett, Washington. (Ryan Berry / The Herald)
Everett lawmakers back universal health care bill, introduced in Olympia

Proponents say providing health care for all is a “fundamental human right.” Opponents worry about the cost of implementing it.

Outside of the updated section of Lake Stevens High School on Thursday, Feb. 27, 2020 in Lake Stevens, Wa. (Olivia Vanni / The Herald)
Lake Stevens, Arlington school measures on Feb. 11 ballot

A bond in Lake Stevens and a levy in Arlington would be used to build new schools.

Support local journalism

If you value local news, make a gift now to support the trusted journalism you get in The Daily Herald. Donations processed in this system are not tax deductible.