Microsoft Database: Teen Exposes 17 Trillion Rows via Missing JWT
By Indie Kings | October 24, 2026
Updated October 24, 2026: A teenager using a custom AI bot named Antares found that Microsoft’s Titan analytics platform lacked proper JWT token validation, exposing 17 trillion records and 25,000 user accounts. The researcher received a $5,000 bug bounty.
Image: Security data environment (verified image URL).
The hack
A researcher who goes by Faav accessed Microsoft’s internal Titan analytics platform through sub-optimal user validation. The platform handles massive analytics data. According to the researcher, he spent the year investigating Microsoft’s services off and on, alongside Amazon, Google, Adobe and others. The access point was the lack of JWT token validation, allowing entry to the database.
The AI bot
The researcher built Antares, an AI orchestrator bot used for scanning and automating security legwork. The bot handled the repetitive discovery work, while the researcher directed it toward vulnerable endpoints. This shows how AI-assisted security scanning is now a common tool for independent researchers.
Key numbers
| Metric | Value |
|---|---|
| Total database rows exposed | 17 trillion |
| User accounts (employee data) | 25,000 |
| $5,000 USD | |
| Microsoft Titan analytics | |
| Lack of JWT token validation |
FAQ
Who did this?
A teenager researcher named Faav.
How big was the database?
17 trillion total rows.
How many user accounts?
About 25,000 records of employee data.
What was the vulnerability?
Sub-optimal JWT token validation on Microsoft’s Titan analytics platform.
Was the bot AI?
Yes, Antares is an AI orchestrator bot for scanning and automation.
What was the reward?
A $5,000 bug bounty.
Bottom Line
A teenager with a custom AI bot found billions of rows open because a single validation layer failed. The $5,000 bounty confirms Microsoft is taking it seriously, but the exposure of 17 trillion records shows that even internal platforms can miss basic security checks.
Sources
- Tom's Hardware: Teenager hacks open Microsoft database with 17 trillion total rows and 25,000 user accounts: custom AI bot and lack of JWT token validation, accessed 24 October 2026
- Source cited: Blog.faav.net (researcher’s original write-up)
Related: Dead Cells: First PS5 Game Runs Natively on Windows via AnyPS5 | Amazon: Nvidia Chips Sitting in Warehouses Without Power | Cubyz: Zig Voxel Sandbox Rebuilt From Java With 3.7k Stars