Truly Terrible Security Practices at Microsoft Sainsbury's
Are there any potential Sainsbury's whistleblowers out there willing to tell us what actually happened this past weekend [1, 2, 3, 4, 5, 6]? They clearly outsourced almost everything to Microsoft (US), even private communications.
THE more we look, the more we 'facepalm'.
Microsoft Outlook, an associate has remarked, so that they lose a prodigious amount of mail and have plausible deniability about not answering it.
Or, like in my case, hanging up the phone on me twice this morning (I was polite; I asked why they didn't call back like they had promised several times).
Non-disclosure agreements (NDAs) or not (they won't tell), it's not looking secure. We know it is Microsoft at the back end because of links like this or that ("© 2013 Microsoft" in 2024). There's also Sharepoint, as we noted before, as per unsecured sessions. The Microsoft login for Sainsbury's are online with token information (accessible through Google search), revealing utter technical incompetence. Notice the string 'sharepoint' in the URL.
And a symptom of the problem is exposed, an associate has explained. The presence of Microsoft products is always a staffing problem and extends up into management.
Former Microsoft staff is now at the very top of the company, as we showed earlier.
Why do we always hear of "IT issue" and nothing more specific? █