ConnectWise Cloud Backup Breach Affects 173 Microsoft 365 Tenants

Hackers compromised a Microsoft 365 API credential belonging to ConnectWise's Cloud Backup application, enabling unauthorized access to 173 customer tenants without requiring passwords or multi-factor authentication. ConnectWise disabled the service on October 17, 2026, following the discovery of unauthorized sign-ins.