Last updated: 8 November 2026
In October 2026, security researchers reported that a stolen credential for the ConnectWise Cloud Backup app (formerly SkyKick) was used to sign in to Microsoft 365 tenants. If that app is in your Microsoft Entra tenant, review it and disable it until your provider confirms it is safe.
What was reported
Huntress reported an attacker signing in as the ConnectWise Cloud Backup Entra app using a stolen credential and obtaining access tokens in many tenants. ConnectWise suspended the service. The cause and the full scope were still under investigation when this page was updated, so treat figures as reported counts rather than confirmed totals.
How to check your tenant
- Sign in to the Microsoft Entra admin centre as an administrator.
- Open Enterprise applications and search for SkyKick, Cloud Backup and Cloud Management.
- Match by application ID, not name. The reported Cloud Backup ID is 506e08f9-6e9a-4da4-942b-a099a03644ae.
- Review sign-in and audit logs for the app, then disable it if it is present and your provider advises it.
Disabling the app stops that backup, so make sure another backup is in place first.
Wider lessons
- Review every connected app at least once a year.
- Remove tools you no longer use.
- Prefer products that separate read and write permissions.
- Ask your provider which third-party apps hold access to your tenant.
If you are an ABCOM client
Contact us and we will confirm what we have checked in your tenant.
Quick answers
Should we delete the app or disable it?
Disabling keeps a record for investigation. Follow your provider’s advice and the vendor’s latest guidance.
Is our backup still working?
If you use this product, the vendor suspended the service, so check it with your provider and make sure another backup is in place.
Not sure which apps have access to your Microsoft 365? We can audit them. Talk to us.
Related answers and guides
Sources and further reading
Related questions
Want this sorted for you?
Talk to our Burgess Hill team about cyber security services. Free, friendly and no obligation.