ConnectWise backup credential used to enter Microsoft 365 tenants
Huntress reported suspicious sign-ins across 162 organizations; ConnectWise disabled seven app identities and three cloud services.
4
Stories per day · 30 days
1 RSS
Relatedconnectwise2microsoft-3652california1cloud1cloud-backup1education1entra1ets1msp1saas1sftp1student-data1supply-chain1unauthorized-access1
5 stories, newest first · one card per story
Stories tagged #credential-compromise
Compromised ETS login copied California student records
Access ran from May 22 to September 18, 2026, and the files did not include SSNs or payment data.
Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants
Attackers used a compromised ConnectWise Cloud Backup credential to sign in to 173 Microsoft 365 tenants.
6
FortiBleed Is Still Active, Locking Organizations Out
FBI and Secret Service say the FortiBleed credential-compromise campaign remains active and is locking organizations out.
3
McDonald’s Employee Data Appears in Leak, Seller Claims 1.7M Records Stolen
A seller offers 1.7 million McDonald's employee records allegedly taken from its Azure tenant via compromised credentials; an 8,000-row sample verifies as genuine.
2