ConnectWise Cloud Backup Disrupted by Supply‑Chain Attack, Hundreds of Clients Affected

ConnectWise announced that a supply‑chain breach linked to a compromised API secret has forced the temporary shutdown of its Cloud Backup service, leaving a portion of its client base without access to critical data for several days.

The software firm, which provides a suite of tools for managed service providers and IT departments, relies on its cloud backup platform to store and protect customer data across a range of environments. The outage has highlighted the central role that third‑party backup services play in modern IT operations, especially for small and midsize businesses that depend on outsourced solutions for resilience.

According to the company, attackers gained entry by exploiting an API secret that was inadvertently exposed within the supply chain. The secret allowed unauthorized actors to interact with ConnectWise’s backup infrastructure, potentially extracting or altering stored information. While the exact method of exposure has not been disclosed, the incident underscores how a single credential can become a gateway for widespread compromise.

ConnectWise estimates that hundreds of customers have been directly affected, with many reporting that they are unable to retrieve or restore files. The firm has been working around the clock to rebuild the service and verify the integrity of stored data, but it has not provided a definitive timeline for when normal operations will resume. In the interim, affected clients remain in a state of uncertainty, unable to confirm whether their backups remain intact.

In response, ConnectWise temporarily disabled several ancillary services to contain the breach and began a coordinated investigation with external cybersecurity specialists. The company has also initiated a credential rotation process to replace the compromised secret and is reviewing its supply‑chain security protocols to prevent similar incidents in the future.

The incident arrives at a time when supply‑chain attacks are increasingly common across the technology sector, prompting regulators and industry groups to call for stricter credential management and transparency standards. Experts advise organizations to regularly audit API keys, enforce least‑privilege access, and maintain robust incident‑response plans. As ConnectWise works to restore its backup platform, customers are urged to monitor communications from the provider and consider supplementary data‑protection measures until confidence in the service is re‑established.