According to BleepingComputer , hackers exploited access to the ConnectWise Cloud Backup service to infiltrate the Microsoft 365 environments of many customers. The incident highlights the security risks when third-party applications are granted deep access to enterprise systems.
According to security firm Huntress, at least 162 Microsoft 365 environments were affected in a supply chain attack related to ConnectWise. Instead of directly attacking individual businesses, hackers exploited access to backup services to gain access to customer systems.