Chinese state-aligned hackers have compromised ConnectWise's cloud backup service, gaining access to application credentials used by numerous corporate customers. This breach allowed the hackers to log into customer environments, potentially accessing sensitive data such as emails and files.
Microsoft reports that the attackers utilized AI agents to execute rapid hacks, affecting approximately 2,250 organizations at a staggering rate of nearly 3,000 attempted sign-ins per minute. ConnectWise has paused access to its service and is currently investigating the incident.
Companies using ConnectWise should monitor their environments closely for unauthorized access and review security protocols, especially multi-factor authentication. Watch for updates from ConnectWise on service restoration and any recommended security measures to mitigate risks.