# Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants

> **Open Intelligence Dossier** · First detected: 2026-10-17 17:20 UTC · Category: Technology

## Executive Summary
Hackers leveraged stolen ConnectWise SkyKick backup credentials to infiltrate 173 Microsoft 365 tenants, prompting a rapid shutdown of backup services.

## Intelligence Brief
Coverage of the incident appears simultaneously across four specialist publications. Cyber Press highlighted that the compromised SkyKick credentials forced a shutdown of the affected backup services, while CyberSecurityNews quantified the scope by noting the 173 Microsoft 365 accounts breached. BleepingComputer framed the event as a supply‑chain attack, emphasizing the reliance of many organizations on ConnectWise’s third‑party tools.


The Hacker News echoed the core details, confirming that the same compromised ConnectWise credential was used to gain access to the 173 tenants. Microsoft 365 remains a primary productivity platform for enterprises worldwide, so any unauthorized entry can expose email, files, and collaboration tools. Supply‑chain attacks such as this exploit the trust placed in a vendor’s infrastructure, allowing malicious actors to move laterally into multiple downstream environments without needing to breach each tenant individually.


Future reporting is expected to focus on remediation steps announced by Microsoft and ConnectWise, including possible credential rotation, mandatory password resets, and guidance for affected tenants. Observers will watch for official statements regarding the extent of data exposure and any additional compromised credentials that may surface. Stakeholders are advised to monitor updates from the four outlets that broke the story and to prepare for potential security advisories from the vendors involved.

## Multi-Source Evidence Table
| Source Outlet | Headline | Verification URL |
|---|---|---|
| LinkedIn | WARNING: ConnectWise Supply-Chain Attack Exposes Microsoft 365 Tenants | [Source Link](https://news.google.com/rss/articles/CBMijAFBVV95cUxPT3BaSGs5Y0R6NjR0RzRITVc2TGo1Yjd6aVFIamM0LWxzeEM2S1lhbEkxOWc0eGh6ZGY5XzNpQXNmcmoyWmtuQlRjN1NwQVJ5UER4TFh2ZEF1WXNWT0phNlJRUFJoY1c5Z3RBcHE0NXNMMlpTVndLeHBiYllHVUpDOUVmNzI0eEdBQzZZRg?oc=5) |
| Cyber Press | ConnectWise SkyKick Credentials Abused in Microsoft 365 Attacks, Backup Services Shut Down | [Source Link](https://news.google.com/rss/articles/CBMifEFVX3lxTFBSbnhaQnNjNkRvRWdWbzluU1ItREROWWhBaWt4Y1ZyaVpQYTFHVjV5T3ljYklwVndYVjdVZ3o3dW4xVnV2Ym95QV9nVWpXNGVuYVM2WmpfQWxSSktmUWtzcVhtN085eExLb2hHd2picDRIMlJKQkxZSEdtUGPSAXxBVV95cUxQUm54WkJzYzZEb0VnVm85blNSLURETlloQWlreGNWcmlaUGExR1Y1eU95Y2JJcFZ3WFY3VWd6N3VuMVZ1dmJveUFfZ1VqVzRlbmFTNlpqX0FsUkpLZlFrc3FYbTdPOXhMS29oR3dqYnA0SDJSSkJMWUhHbVBj?oc=5) |
| CyberSecurityNews | Hackers used Compromised ConnectWise Backup Credentials to Hack 173 Microsoft 365 Accounts | [Source Link](https://news.google.com/rss/articles/CBMigwFBVV95cUxOdjBNbGZBM3lMQXRDeTZOcFc4cVFZenVRZUpiWUpMSW1jaEhZV2s5emRvbm9GdGNYbjIxOHRFMXhDbTZzVjBLaGlIN0hpS0RFSURDdkU3UENDblhqN0JWY0FXc1BmblNjQlJBVXVIZjMxS3lLWVhWQ2hxc0oxNEw4TE9Rb9IBiAFBVV95cUxOd3JZcTlEMjF6THlwWU55M2RWSGxObktWY2RlRVVLSFJHc0pBR25mVUVjWVRxeDNhOHF0aUkzTFpzaVFKUlZiNzB5c0huZHVTMkVQQ3FPa3hTVmMxYUlIZEhTdWNaNkVicm9WNWVwbTlydHZsUGFLd2M1SVVHS3VCeWRnMlNuZnVs?oc=5) |
| BleepingComputer | Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack | [Source Link](https://news.google.com/rss/articles/CBMivAFBVV95cUxNclltSEJ0UTh3UzMya2ZUNlJnMVRkeTBsX2d5bEdxeDJKUlhOZ1lBVi1vX21WYWkzdmZ0VVhRSVY0THlYOXcwR2ZfY1NvSzJoNENTS2ljWEpFRXVCYnpDR3NjTXd5ZE5QMFprV1Y4R3kxV2JrdGhpRFh0QzZXcE56UE82M3VJSDJIVGJrNGlRdmpBM2duYXRzOTlub0R4WVY5WmdSWjZQWURHLTJhSXRnTUt5Q3N2dTlObm9yTNIBwgFBVV95cUxQb010TkNjTHNkazM5ZXkyT1ZIZXVTNVF5VUQwNkowTEVLWVNBbWxXcjM2TXRvUUFlR2VqLVZsM3lXdHJiZTkwT2dJZjIzaWUySWl4NHRpNXdLczlnckIwX0NPamhQUzV2QkhmdHNnWXpaZ1hfVTFzY3ctUC1xbmt4QXV0bzZTV3lsSTFDaWxsN1VaQnlYSDF) |
| The Hacker News | Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants | [Source Link](https://news.google.com/rss/articles/CBMif0FVX3lxTE9LLVo4bDAtYTNoMmpoeFIwdFpheVNIQVJMaXZqOUtaZXZ4TjE4M2E3T0Z4SlA0aVJtNGh3N2dBSXg2SWZiQ0EtcVRKNnhrU1E3RVN5ejJ1V0h4Y2U1SG5nMmtGV2xWckV6NkJWaVJ2VEZDWGVVVTdRLUI1YzgxUUU?oc=5) |

---
*Canonical Source: https://pulse.byoviral.com/trend/2026-10-17/hackers-use-compromised-connectwise-credential-to-sign-in-to-173-microsoft-365*