MSP Process breach leads to attacks on customers’ Entra tenants
Entra app credentials and other information reportedly leaked in the MSP Process breach were exploited to attack customer tenants. On 9 November, it emerged that Huntress had observed successful malicious token issuance in 47 tenants, with subsequent activity including privilege escalation, account creation and data exfiltration confirmed in one tenant.
Key facts
- Affected organisation
- MSP Process
- Incident type
- Hacking & intrusion
- Occurred / detected
- Not confirmed
- Scale of damage
- Successful malicious token issuance in 47 customer Entra tenants; data exfiltration and other activity confirmed in one tenant
- Cause / method
- Entra app credentials and other information reportedly leaked in the MSP Process breach were exploited to attack customer tenants
- Location
- Other countries
Timeline
- Successful malicious token issuance in 47 customer Entra tenants linked to the MSP Process breach, along with subsequent activity including data exfiltration in one tenant, came to light.
2 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.