Proskauer Rose is investigating a data breach after large tranches of sensitive client information were found to be publicly accessible from its cloud-based site, highlighting the vulnerabilities that can exist when organizations transition their internal data to the cloud.

The New York-based law firm said in a statement Tuesday that a third-party vendor who was contracted to set up the cloud site on Microsoft Azure “misconfigured” the site’s security, which left the client data on the site vulnerable to an unauthorized actor and anyone else with access to the internet.