Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack

ConnectWise has temporarily shut down customer access to its Cloud Backup service, formerly known as SkyKick Cloud Backup, following a sophisticated cyberattack. Hackers managed to compromise application identities to breach Microsoft 365 tenants.

According to reports from BleepingComputer, the attackers exploited a supply-chain vector to gain unauthorized access. This breach allowed malicious actors to compromise downstream environments and threaten corporate data stored within the cloud.

Supply-chain attacks remain one of the most critical challenges in cybersecurity today, as compromising a single trusted third-party vendor instantly exposes thousands of downstream business clients to severe security risks.

ConnectWise engineering teams are actively addressing the incident, implementing remediation steps, and securing the affected infrastructure. The sudden shutdown of the backup service has temporarily disrupted routine cloud data operations for numerous organizations.

This security breach highlights the vital importance for IT professionals and businesses globally, including in emerging tech markets, to continuously monitor and audit third-party cloud integrations and supply chain dependencies.