ConnectWise Halts Cloud Backup After Credential Theft Breaches Microsoft 365 Tenants
ConnectWise suspended its Cloud Backup service on October 17, 2026, after attackers exploited compromised application identities to access Microsoft 365 tenants. The incident, detected on October 14, involved unauthorized sign-ins from a specific IP address, allowing attackers to potentially access mail, files, and directory data. While ConnectWise states existing backups remain secure, the breach highlights risks of delegated admin privileges in managed service provider (MSP) environments.