On October 13, 2026, unauthorized access was detected across 173 Microsoft 365 tenants via a compromised ConnectWise service account credential. The attackers exploited delegated admin privileges, enabling broad access to sensitive data including mailboxes, OneDrive, SharePoint, Teams, and directory information. The incident did not involve a software vulnerability in ConnectWise but rather the theft or exposure of a…
