Skip to content
WorldBrand.AI

Office 365 controversies

Controversies tied to this brand in public sources. A listing is not a finding of fault.

Back to profile1 entries

  1. 2026

    ConnectWise investigates unauthorized access involving Microsoft 365

    Issue disclosure

    ConnectWise investigated unauthorized access involving application identities associated with Cloud Backup. Huntress documented unauthorized Microsoft 365 authentication using compromised ConnectWise Cloud Backup credentials, with sign-ins across more than 160 customer tenants. ConnectWise said affected shared credentials had been invalidated and reported no evidence that stored backup archives were accessed.

    Company response

    • Remediation — ConnectWise

      ConnectWise says the affected shared credentials have been invalidated.

    • Ongoing disclosure — ConnectWise

      ConnectWise has expanded its technical guidance and published additional suspicious IP addresses for partners to investigate.

    Source excerpt

    • Independent research by Huntress documented unauthorized Microsoft 365 authentication using a compromised ConnectWise Cloud Backup credential, with unauthorized sign-ins confirmed across more than 160 customer tenants.
    • ConnectWise continues investigating unauthorized access involving application identities associated with Cloud Backup, formerly known as SkyKick, after attackers used compromised credentials associated with the service to authenticate to customer Microsoft 365 environments.
    • The company discovered the activity October 15
    Source