Drooid Logo
Back to story perspectives

Full Breakdown

ConnectWise Halts Cloud Backup and Integrated Services After Detecting Unauthorized Access

By Drooid · · How we work

Service Interruption and Immediate Impact

The company immediately suspended its Cloud Backup service—formerly SkyKick—and the related SaaS Security and Cloud Management offerings. As of October 18 at 16:00 UTC, the services remained unavailable, preventing end-users from backing up data, accessing archives, or restoring files. Existing archives stay encrypted, isolated, and preserved, with ConnectWise reporting “no evidence of unauthorized access” to those backups.

Background on the Affected Platform

ConnectWise provides an ERP platform for managed-services providers (MSPs) and includes tools for backing up data stored on-premises, in the cloud, or in SaaS applications such as Microsoft 365 and Google Workspace. Because SaaS Security and Cloud Management are tightly integrated with Cloud Backup, the suspension extended to those functions as a precaution while the investigation proceeds.

Official Statements & Responses

Jason Ferguson, ConnectWise’s vice-president of security operations, communicated on Reddit that the company is conducting forensic analysis, threat hunting, and remediation activities. ConnectWise emphasized that the suspension does not imply that customers’ environments were compromised and noted that it has disabled several integrations with Exchange, Teams, SharePoint Online, and its own products.

Verbatim Quote

  • “You must review the credentials on all of your M365 applications.” — Reddit. ConnectWise — Reddit. ConnectWise