Microsoft Teams

Microsoft's own Incident Response team documented attackers using Teams itself as the delivery mechanism - impersonating IT help desk staff in chat and voice calls to talk employees into granting access. That is the finding worth generalising: the security control most organisations rely on is 'the message came through our internal, authenticated corporate tool,' and the attack works precisely because that assumption is doing all the work. This is the same social-engineering pattern that produced the Aflac breach documented in Life-Health-Dental and the broader 2025-26 campaign this tracker treats as its biggest connective thread. No technical exploit is involved.

• Severity
• Evidence tierUnassigned
• Claims confirmed
• Last verified2026-08-04

Primary source. None recorded — Unverified - heuristic first draft.

Arbitration

Not independently confirmed this pass — governed by Microsoft's overall Services Agreement (see Microsoft/Outlook row, Consumer Apps tab).

Contacts

Privacy contact. No published privacy email; Microsoft routes requests via microsoft.com/concern/privacy (30-day response commitment)

Legal notice. PUBLIC COMPANY (MSFT). Service route: c/o General Counsel / Corporate Secretary, Redmond, Washington — the corporate address on the SEC Form 10-K cover page is the official address of record. Confirm the exact street address on the current 10-K at sec.gov/edgar, and check the state-of-incorporation registered agent (usually Delaware; most large filers use The Corporation Trust Company or Corporation Service Company) via the Secretary of State business-entity search. A registered agent MUST accept service, which is why it is the reliable channel when a company publishes no privacy address.

Mailing address. Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA