Companies ainotis Join
My notis
Company

ConnectWise

1 story · first 24 Oct · latest 24 Oct

1
stories
6
facts checked
24 Oct
first story
24 Oct
latest

Facts we checked

6

ConnectWise's status page says phased restoration began on Oct 21, 2026.

October 21, 2026 2:35PM UTC IDENTIFIED ... We have begun restoring services in controlled phases, following remediation and security validation. ... We expect restoration to take several days.

ConnectWise Cloud Backup incident · ConnectWise status page · archived copy · checked 24 Oct 2026 · Cite this fact · the story

ConnectWise's status page says it has no evidence the encrypted backup archives were accessed, and that it cannot determine from its own investigation whether individual partners' or customers' Microsoft 365 environments were affected, so partners are advised to review their tenants.

We have no evidence that these encrypted backup archives have been accessed. ... we cannot determine through our investigation alone whether a particular customer’s Microsoft 365 environment experienced unauthorized activity. Partners should continue reviewing their environments with their security teams or managed security providers.

ConnectWise Cloud Backup incident · ConnectWise status page · archived copy · checked 24 Oct 2026 · Cite this fact · the story

Show 4 more

ConnectWise's status page says seven application identities were disabled on Oct 17, 2026, and a full reset of all accounts and credentials in the affected Cloud Backup environment was completed on Oct 19, 2026.

At 07:00 UTC on October 17, 2026, we disabled the seven ConnectWise application identities posted on our Trust Center page. ... On October 19, we completed a full reset of all accounts and credentials in the affected Cloud Backup environment.

ConnectWise Cloud Backup incident · ConnectWise status page · archived copy · checked 24 Oct 2026 · Cite this fact · the story

ConnectWise's status page says that on Oct 16, 2026 it was investigating attempts of unauthorized access associated with its Cloud Backup environment (formerly SkyKick), and on Oct 17 that it had identified unauthorized access to application identities.

October 16, 2026 5:48PM UTC INVESTIGATING ConnectWise is investigating recent attempts of unauthorized access associated with the ConnectWise Cloud Backup environment. ... October 17, 2026 5:11AM UTC IDENTIFIED We recently identified unauthorized access to application identities within the ConnectWise Cloud Backup environment.

ConnectWise Cloud Backup incident · ConnectWise status page · archived copy · checked 24 Oct 2026 · Cite this fact · the story

Microsoft says ConnectWise published an initial advisory on October 16, 2026, about attempted unauthorized access associated with Cloud Backup.

ConnectWise published an initial advisory on October 16, 2026, and subsequently expanded its disclosures and containment guidance. The advisory details ConnectWise’s investigation of attempted unauthorized access associated with Cloud Backup.

AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise · Microsoft Security Blog · archived copy · checked 24 Oct 2026 · Cite this fact · the story

Microsoft assesses that Storm-0940 was responsible for the recently disclosed ConnectWise supply chain compromise of a multi-tenant application.

Microsoft assesses that Storm-0940 was responsible for the recently disclosed ConnectWise supply chain compromise of a multi-tenant application.

AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise · Microsoft Security Blog · archived copy · checked 24 Oct 2026 · Cite this fact · the story

Company

ConnectWise

1 story · first 24 Oct · latest 24 Oct

Facts we checked

Each fact was checked against the page it links to.

The story

Cases

Ongoing case: Cyber-capable AI models

Built from our published stories and the facts we checked, and kept up to date by them. How we correct.