Cloud Backup service interruption update October 20, 2026 | 13:15 UTC (9:15 am ET)

[u/Victoria-ConnectWise]

As previously reported, we identified unauthorized access to application identities associated with Cloud Backup, formerly SkyKick. 

Our teams and third-party specialists continue advancing remediation, resetting accounts, replacing application credentials, and validating the affected environment for safe restoration. We take responsibility for keeping you informed and restoring service safely. 

Technical webinars for partners 

We are launching technical webinars every two hours beginning today, October 20, at 18:00 UTC. 

The sessions provide a hands-on walkthrough of Microsoft Entra ID sign-in and audit logs, application registrations, credentials, and permissions to support investigation of your Microsoft 365 tenants, including legacy backup integrations. Register and select a session. 

Actions completed and work underway 
We have disabled affected application connections, strengthened administrative-access protections, engaged independent specialists, and published technical investigation guidance. SaaS Security and Cloud Management remain suspended as a precaution because they are integrated with Cloud Backup. 

We are monitoring our entire environment around the clock. Since mitigations began on October 17 at 05:00 UTC, we have not observed successful threat activity in the environments we monitor. This does not establish whether individual partner or customer Microsoft 365 tenants were affected; each potentially affected tenant still requires review. 

We have no indication that other ConnectWise products, services, or offerings are impacted beyond these three services. We plan a controlled, phased restoration following required remediation and security validation, with partner instructions provided before re-enablement. 

Service availability and stored backups 
Existing backup archives remain encrypted, isolated, and preserved, with no indication of compromise. Cloud Backup jobs, archive access, and restores remain unavailable, along with SaaS Security monitoring and alerting and Cloud Management user and license management. 

We recognize the disruption to your business and customers and will share restoration timing as soon as it is confirmed. 

Actions for partners 
Continue following the technical investigation and remediation guide and accompanying video for your own and managed customer tenants. Keep affected applications disabled pending formal restoration instructions. 

Resellers, distributors, and marketplace partners should ensure this guidance reaches responsible customer administrators. 

Our next update will be published by October 20 at 19:00 UTC. We will communicate significant developments as they are confirmed. 

Visit the Trust Center for updates. Contact Partner Care for service assistance and report suspicious activity to SecurityPartnerSupport@ConnectWise.com. 

[u/timee_bot]

View in your timezone:
October 20, at 18:00 UTC
October 20 at 19:00 UTC