Story perspectives

ConnectWise Suspends Services After Microsoft 365 API Secret Theft

By Drooid · Oct 19, 2026, 6:17 PM UTC · How we work

Summary

Story summary

ConnectWise halted Cloud Backup, SaaS Security, and Cloud Management services after detecting unauthorized access.
Huntress reported a stolen Microsoft 365 API secret enabled attackers to access customers' M365 data.
In a partner tenant, a ConnectWise Cloud Management app granted itself Global Administrator and added credentials to two apps.
ConnectWise said archives stay encrypted, isolated, and uncompromised.
ConnectWise urges customers to review their Microsoft 365 credentials.

1 of 1

Story summary

ConnectWise halted Cloud Backup, SaaS Security, and Cloud Management services after detecting unauthorized access.
Huntress reported a stolen Microsoft 365 API secret enabled attackers to access customers' M365 data.
In a partner tenant, a ConnectWise Cloud Management app granted itself Global Administrator and added credentials to two apps.
ConnectWise said archives stay encrypted, isolated, and uncompromised.
ConnectWise urges customers to review their Microsoft 365 credentials.