Microsoft's Azure Health Bot Service was found to have critical security vulnerabilities that could have exposed sensitive patient data across multiple tenants. These flaws, identified by researchers, could have allowed hackers to exploit the system and move laterally within customer environments, posing a risk of large-scale privacy breaches. The vulnerabilities have since been fixed, but they previously allowed users to access and manage other customers' resources. The AI-powered chatbots, used for handling personal medical data, were susceptible to being tricked into disclosing personal data for hundreds of customers, as reported by researchers at Tenable Security.