ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants

ConnectWise has suspended its Cloud Backup service due to an incident where unknown attackers gained unauthorized access to application identities, resulting in the compromise of Microsoft 365 tenants. As part of its investigation, ConnectWise has disabled seven of its application identities. The disabled identities include ConnectWise Cloud Backup. The action is aimed at containing the incident while the investigation continues. The identities were compromised by unknown threat actors, allowing them to access Microsoft 365 tenants without authorization. ConnectWise's investigation into the matter is ongoing.