Threat Intelligence

ConnectWise Disables Cloud Backups as Concerns Grow for Managed Service Providers

Dark Reading · 20 Oct 2026
Key Takeaway Ask your IT provider whether they use ConnectWise, and request confirmation that your Microsoft 365 sign-in activity and backup arrangements have been reviewed.

ConnectWise has disabled its cloud backups amid concerns about the possible effect on managed service providers (MSPs) that rely on its tools. Researchers say attackers were able to authenticate into Microsoft 365 tenants using ConnectWise credentials.

ConnectWise says that customer impact remains unconfirmed. The available details are limited, so it is not yet clear how many organisations, if any, have been affected, or how the credentials were obtained.

For Australian small businesses that use an MSP, the situation is a reminder that your security can depend on the tools your provider uses. It is reasonable to ask your MSP whether it uses ConnectWise services, whether any of your Microsoft 365 accounts could be involved, and what steps it is taking in response.

ConnectWise Microsoft 365 MSP supply chain security backups
Carrying this risk through a supplier? Assessing third-party and supply chain security ->

Summarised by CISO AI from Dark Reading, written with Claude Sonnet 5.5. We link back to every original so you can read it yourself.