Microsoft says Chinese hackers breached 2,250 firms through ConnectWise

Microsoft researchers say China state-aligned hackers broke into ConnectWise's cloud backup service and stole credentials that link it to customers. The credentials let them sign in to customers' Microsoft-hosted systems as authorized users.

Organizations breached

2,250 organizations

Microsoft says AI agents let the hackers break into around 2,250 organizations, at almost 3,000 attempted sign-ins a minute.

ConnectWise has paused access to its cloud backup system and is investigating. As of Thursday, it said it was working to restore the service.