A couple of days ago, a forum user on the website The Tech Game posted instructions about how to use an exploit that allowed users to generate codes for Microsoft Points on Xbox Live.
Microsoft has since released a statement indicating that it is investigating the situation, intends to invalidate the illegitimately-generated codes, and is looking into punishing those who participated in the exploit.
Though Microsoft discovered the exploit within hours, many news sites initially estimated that around $1.2 million worth of codes were 'stolen.' According to a report on Gamasutra, Microsoft asserts that the $1.2M figure is far too high. "We can't share specific numbers, but the figure is nowhere near the amount that has been reported," they insisted.