MSP Process breach leads to attacks on customers’ Entra tenants
Entra app credentials and other information reportedly leaked in the MSP Process breach were exploited to attack customer tenants. On November 9, it emerged that Huntress had observed successful malicious token issuance in 47 tenants, with follow-on activity including privilege escalation, account creation, and data exfiltration confirmed in one tenant.
Key facts
- Affected organization
- MSP Process
- Incident type
- Hacking & intrusion
- Occurred / detected
- Not confirmed
- Scale of damage
- Successful malicious token issuance in 47 customer Entra tenants; data exfiltration and other activity confirmed in one tenant
- Cause / method
- Entra app credentials and other information reportedly leaked in the MSP Process breach were exploited to attack customer tenants
- Location
- Other countries
Timeline
- Successful malicious token issuance in 47 customer Entra tenants linked to the MSP Process breach, along with follow-on activity including data exfiltration in one tenant, came to light.
2 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.