ConnectWise pauses cloud backup after Microsoft 365 tenant breaches
Attackers used credentials linked to a ConnectWise service to reach partner and customer environments without permission. The company has since shut off seven app identities.
By Standard Topic. AI-generated from the reporting listed under Coverage. Published . Updated .
This story is no longer being updated. It reflects reporting up to .
What happened
A supply-chain attack involving ConnectWise's cloud services gave unauthorized parties access to Microsoft 365 customer accounts. The incident centres on credentials tied to ConnectWise Cloud Backup, and successful sign-ins were recorded across 173 partner and customer tenants. ConnectWise responded by disabling seven application identities and suspending Cloud Backup.
Why it matters
Microsoft 365 customers were exposed to unauthorized application access through the attack.
Timeline
- Oct 17, 4:00 PM ET: Successful sign-ins were recorded across 173 partner and customer tenants linked to the attack.
- Oct 18, 4:23 AM ET: ConnectWise shut off seven application identities and paused its Cloud Backup service.
Coverage
- ConnectWise Suspends Cloud Services in Response to Cyberattack (securityweek.com)
- ConnectWise turns off its SaaS-y backup, security, and management services to probe security SNAFU (theregister.com)
- ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants (thehackernews.com)
- WARNING: ConnectWise Supply-Chain Attack Exposes Microsoft 365 Tenants (linkedin.com)
More from Technology & AI
- Eight states sue OpenAI, alleging misleading AI safety claims
- OpenAI announces solution to Navier-Stokes math problem
- Datadog bets AI agents can handle testing of AI-written code
- Anthropic and OpenAI sketch wealth-sharing plans before IPOs
- Mamdani administration proposes AI customer service rules
- Florida engineers study how AI behaves in high-risk situations