ConnectWise investigating potential Cloud Backup Breach

ConnectWise has posted on their status page that they are investigating unauthorized access events in their Cloud Backup platform (formerly SkyKick). While ConnectWise has not confirmed successful unauthorized access, third-party intelligence sources claim that a threat actor gained access and pivoted to live O365 environments of MSP customers using ConnectWise Cloud Backup. The Cloud Backup platform is used by MSPs to back up all of O365, including EntraID, which could result in significant impact if data files were accessed.