ConnectWise suspends Cloud Backup after unauthorized access tied to supply chain attack

What happened and what to do

According to the advisory from ConnectWise, reported by The Record, the company suspended the Cloud Backup service after confirming unauthorized access associated with the service environment. On Friday the company said it was investigating unauthorized access attempts; on Saturday it confirmed that the access had occurred. The case is treated as a supply chain attack, since it hits a provider that manages backups for third parties.

For a client company, the risk is losing access to backup copies and having data potentially exposed beyond its own control. A practical project starts with an inventory of all backup systems managed by vendors, identifying the credentials, tokens and integrations that connect them to the environment. Next, an independent copy of critical data can be built on the client's own infrastructure, with immutable retention and keys under the client's control, plus access monitoring and anomaly alerts on integration accounts. It is also worth testing restores in an isolated environment to measure real recovery time.

How the consultancy can help

Diagnosis of exposure to cloud backup providers: mapping dependencies, credentials and critical data. Then design and deployment of an independent copy with immutable retention, access monitoring and periodic restore tests in the client's environment.

Next step

If your company uses third-party managed backup, send a short description of your environment and critical data. We will return a scoped proposal to assess the exposure and define the next step.