“We are conducting a thorough investigation into the researchers’ claims. We have requested information that will allow us to investigate the console in question and have still not received the information needed to replicate the researchers’ claims,” Microsoft’s Jim Alkove, General Manager, Security, Interactive Entertainment Business, told BGR in an emailed statement.
Alkove continued, “Xbox is not designed to store credit card data locally on the console, and as such seems unlikely credit card data was recovered by the method described.”
Alkove continued, “Xbox is not designed to store credit card data locally on the console, and as such seems unlikely credit card data was recovered by the method described.”
He went on to state that when Microsoft issues refurbished consoles, they have "processes in place to wipe the local hard drives of any other user data" and that they "take the privacy and security of personal data very seriously."