AI Incident Database: Microsoft Copilot Reportedly Able to Access Cached Data from Since-Private GitHub Repositories
Lasso Security reported that Microsoft Copilot could return content from GitHub repositories that had been public briefly but later set to private or deleted. Lasso attributed this to Bing's caching system, which stored "zombie data" from over 20,000 repositories. The cached content allegedly included sensitive information such as access keys, tokens, and internal packages. Microsoft reportedly classified the issue as low severity and applied only partial mitigations.
AI Incident Database · Incident 1174Operator lens (low): inspect D7 (tool permissions).
Event summary
Lasso Security reported that Microsoft Copilot could return content from GitHub repositories that had been public briefly but later set to private or deleted. Lasso attributed this to Bing's caching system, which stored "zombie data" from over 20,000 repositories. The cached content allegedly included sensitive information such as access keys, tokens, and internal packages. Microsoft reportedly classified the issue as low severity and applied only partial mitigations.
Linked entities
- Microsoft
vendor | 70%
- github-users
organisation | 70%
- github-repositories
organisation | 70%
- GitHub
vendor | 70%
- privacy
organisation | 70%
Related graph edges
| Edge | Type | Confidence |
|---|---|---|
| ent-vendor-microsoft to ent-psf-d2 | maps to | 60% |
| ent-vendor-microsoft to ent-psf-d2 | maps to | 60% |
| ent-vendor-microsoft to ent-psf-d2 | maps to | 60% |
| ent-vendor-microsoft to ent-psf-d6 | maps to | 60% |
| ent-vendor-microsoft to ent-psf-d6 | maps to | 60% |
| ent-vendor-microsoft to ent-psf-d6 | maps to | 60% |
| ent-vendor-microsoft to ent-psf-d7 | maps to | 60% |
| ent-vendor-microsoft to ent-psf-d7 | maps to | 60% |
| ent-vendor-microsoft to ent-psf-d7 | maps to | 60% |
| ent-vendor-microsoft to ent-psf-d7 | maps to | 60% |
| ent-vendor-microsoft to ent-psf-d7 | maps to | 60% |
| ent-vendor-microsoft to ent-psf-d7 | maps to | 60% |