Attackers used a compromised ConnectWise Cloud Backup credential to access 173 Microsoft 365 customer and partner tenants. The company has since disabled 7 app identities, though it warned that access tokens issued prior to the shutdown may remain valid, leaving some systems vulnerable.
Wednesday, October 21, 2026
Story
ConnectWise Shuts Cloud Backup and Disables 7 App Identities After Breach
Cybersecurity3 days ago
The management software firm has suspended access to its Cloud Backup service and revoked a series of application permissions to secure compromised tenant accounts. This move has left backups and restores unavailable for customers while the company works to mitigate a supply chain attack against its environment.
Looking for more context or analysis?
Tilt chat provides reliable, tailored insights, alerts, and automations.