Talk:2021 Microsoft Exchange Server data breach

This article is written in American English, which has its own spelling conventions (color, defense, traveled) and some terms that are used in it may be different or absent from other varieties of English. According to the relevant style guide, this should not be changed without broad consensus.

This is the talk page for discussing improvements to the 2021 Microsoft Exchange Server data breach article.
This is not a forum for general discussion of the article's subject.

Put new text under old text. Click here to start a new topic.
New to Wikipedia? Welcome! Learn to edit; get help.

Article policies

Find sources: Google (books · news · scholar · free images · WP refs) · FENS · JSTOR · TWL

A news item involving 2021 Microsoft Exchange Server data breach was featured on Wikipedia's Main Page in the In the news section on 14 March 2021.

Wikipedia

Microsoft Mid‑importance

	This article is within the scope of WikiProject Microsoft, a collaborative effort to improve the coverage of articles relating to Microsoft on Wikipedia. If you would like to participate, please visit the project page, where you can join the discussion and see a list of open tasks.MicrosoftWikipedia:WikiProject MicrosoftTemplate:WikiProject MicrosoftMicrosoft articles
Mid	This article has been rated as Mid-importance on the project's importance scale.

Computing: Security Low‑importance

This article is within the scope of WikiProject Computing, a collaborative effort to improve the coverage of computers, computing, and information technology on Wikipedia. If you would like to participate, please visit the project page, where you can join the discussion and see a list of open tasks.ComputingWikipedia:WikiProject ComputingTemplate:WikiProject ComputingComputing articles

Low

This article has been rated as Low-importance on the project's importance scale.

This article is supported by WikiProject Computer Security (assessed as Mid-importance).

Things you can help WikiProject Computer Security with:

Article alerts will be generated shortly by AAlertBot. Please allow some days for processing. More information...

Review importance and quality of existing articles
Identify categories related to Computer Security
Tag related articles
Identify articles for creation (see also: Article requests)
Identify articles for improvement
Create the Project Navigation Box including lists of adopted articles, requested articles, reviewed articles, etc.
Find editors who have shown interest in this subject and ask them to take a look here.

Internet Low‑importance

	Internet portal This article is within the scope of WikiProject Internet, a collaborative effort to improve the coverage of the Internet on Wikipedia. If you would like to participate, please visit the project page, where you can join the discussion and see a list of open tasks.InternetWikipedia:WikiProject InternetTemplate:WikiProject InternetInternet articles
Low	This article has been rated as Low-importance on the project's importance scale.

Proposed merge of 2021 Microsoft Exchange cyberattack into 2021 Microsoft Exchange Server data breach

Relative size and quality of prose and citations. See Talk:2021 Microsoft Exchange cyberattack#Merge proposal Assem Khidhr (talk) 12:57, 10 March 2021 (UTC)[reply]

I've gone ahead and performed the merge, since there's no reason for two articles on the same topic to exist. GorillaWarfare (talk) 14:50, 10 March 2021 (UTC)[reply]

@GorillaWarfare: The direction of the merger should be be reconsidered please, for the following reasons:

2021 Microsoft Exchange cyberattack was the older article and WP:REDUNDANTFORK states that the "the more recent article" is the one that should be merged.
The word cyberattack is better than data breach as it is more general. There have been a variety of payloads and consequences, not just the copying of data. These include installation of shells to take control of machines, installation of cryptomining software and ransomware attacks which can disable entire organisations. The scale and scope of this is quite wide and will continue until the hundreds of thousands of compromised machines have been thoroughly cleaned.
Calling it a data breach makes it sound like a one-off event rather than a continuing calamity.

Andrew🐉(talk) 09:57, 15 March 2021 (UTC)[reply]

My major concern was just not having two articles on the same topic live at the same time. I don't have as strong feelings about which title ought to be used, and am happy to implement any consensus that's reached here. GorillaWarfare (talk) 14:35, 15 March 2021 (UTC)[reply]

As the creator of this article and proposer of the merge, I wasn't aware of WP:REDUNDANTFORK, although I do admit to it being fairer in terms of preserving creatorship according to precedence. I'd also support a more general title, but maybe in the plural as well: 2021 Microsoft Exchange cyberattacks, to avoid giving the very evaded impression (item 3 above). As a side note, the same plural issue might apply to 2020 United States federal government data breach? Assem Khidhr (talk) 16:04, 15 March 2021 (UTC)[reply]

ShortDesc

@GorillaWarfare: Thanks for the great work expanding the article. I really admire that it's swift and on-point. Suckup aside tho, I think the current Desc less aligns with WP:HOWTOSD in terms of avoiding duplicating information in the title. I originally tried to paraphrase "Microsoft Exchange Server" into something more descriptive; namely, a proprietary email service. I also previously used a wave of (and was about to use a series of) to emphasize that it's a plethora of continuous attacks rather than a snatch-and-run. I'd like to know your perspective. Assem Khidhr (talk) 15:32, 10 March 2021 (UTC)[reply]

I've just updated it to "Series of cyberattacks targeting Microsoft's email and calendar server", what do you think of that? GorillaWarfare (talk) 15:39, 10 March 2021 (UTC)[reply]

Sounds like a cool compromise. Assem Khidhr (talk) 15:44, 10 March 2021 (UTC)[reply]

Multiple breaches, not a single one.

Hello, I just want to note a subtle difference. These were multiple breaches, not just one. This is important because these servers are decentralized, unlike typical cloud technology like gmail. The body of the article uses 'breaches' correctly. But of course titles are more resistent to change. The vulnerability (I think) is the same one, or at least a single family of vulnerabilities, that existed since 2013. No proposal here, I just want to mention it.--TZubiri (talk) 23:14, 14 March 2021 (UTC)[reply]

@TZubiri: You may wish to see the above section on naming. GorillaWarfare (talk) 16:43, 15 March 2021 (UTC)[reply]

Western Australian parliament breached

Is it worth mentioning that the Western Australian parliament suffered one of these breaches? I don't know if its a notable enough organisation to be worth mentioning or not. 1. JT_dale^Talk~ 12:39, 17 March 2021 (UTC)[reply]