Update to my earlier post, ConnectWise Cloud Backup Breach Hits Microsoft 365 Tenants. The outage got bigger.
What’s new
- Because SaaS Security and Cloud Management are integrated with Cloud Backup (formerly SkyKick), ConnectWise suspended those too “out of an abundance of caution.”
- As of October 18 around 11 a.m. CT, the services were still down: no new backups, no archive access and no restores.
- ConnectWise says existing archives “remain encrypted, isolated, and preserved, with no evidence of unauthorized access,” and it’s doing forensics and threat hunting.
- The suspension doesn’t mean every customer was compromised; ConnectWise just isn’t confident it can run the services safely yet.
What I’d do
The same advice from my first post still applies: review app identities and consents, and check role changes since October 15. If you depend on this for backups, plan another way to back up and restore until it’s back.
