Pax8 data leak exposes MSP customer and Microsoft licensing details

Cloud marketplace Pax8 has confirmed a data leak incident where an internal spreadsheet containing sensitive business information, including MSP customer and Microsoft licensing data, was mistakenly emailed to fewer than 40 UK-based partners. The accidental distribution occurred on January 13 and involved details that could reveal pricing strategies and partner management information, according to a recent report by Bleeping Computer.

The compromised spreadsheet, titled "Potential Business Premium Upgrade Tactic to Save Money," was sent by a Pax8 strategic account manager. It contained over 56,000 entries detailing partner and customer names and IDs, Microsoft SKUs, license counts, renewal dates, and transaction specifics. Although Pax8 stated the file did not contain personally identifiable information, it included crucial business intelligence. Following the error, Pax8 attempted to recall the email and requested recipients delete the attachment.

Industry sources indicate that threat actors are now attempting to acquire this dataset, potentially for competitive targeting, phishing, or extortion efforts. The potential misuse of exposed licensing and customer data by competitors or malicious actors underscores the importance of stringent data protection regulations and the ongoing challenges organizations face in safeguarding sensitive business information.

Source: Bleeping Computer