ConnectWise Halts Cloud Backup Service After Confirmed Unauthorized Access

ConnectWise announced on Saturday that it is suspending its Cloud Backup offering following confirmation of unauthorized access to the service, a step taken after an initial investigation revealed suspicious activity on Friday.

The company first disclosed on Friday that it was looking into "attempts of unauthorized access associated with the ConnectWise Cloud Backup environment," signaling that its security team had detected anomalies that could indicate a breach. By the following day, ConnectWise said the attempts had materialized into actual access, prompting the decision to shut down the service while the issue is addressed.

Industry analysts note that the incident appears to be part of a broader supply‑chain attack trend, where threat actors target third‑party platforms to reach multiple downstream customers. ConnectWise, a provider of IT management and professional services automation tools, has long been a critical infrastructure component for managed service providers, making any compromise potentially far‑reaching.

Customers using the Cloud Backup product are being advised to review their data protection strategies and to follow any remediation steps issued by ConnectWise. The firm has pledged to keep users informed as it conducts a forensic investigation, works to identify the attack vector, and restores the service safely.

The suspension underscores the growing challenges faced by cloud service providers in defending against sophisticated intrusion attempts. While ConnectWise has not disclosed the scale of data potentially exposed, the incident serves as a reminder for businesses to maintain layered security controls and to stay vigilant about third‑party risk. Further updates are expected as the investigation progresses and as ConnectWise outlines a timeline for reinstating the backup service.