On April 20, 2012, Microsoft fixed a flaw in Hotmail's password reset system that allowed anyone to reset the password of any Hotmail account. The company was notified of the flaw by researchers at Vulnerability Lab on the same day[22] and responded with a fix within hours — but not before widespread attacks as the exploitation technique spread quickly across the Internet.[23][24]