Microsoft — Data Breach

Executive Summary

Microsoft disclosed that a Chinese state-sponsored group known as Hafnium exploited four zero-day vulnerabilities in on-premises Exchange Server, compromising over 30,000 organizations in the US alone. Attackers gained access to email accounts and installed web shell malware. The US, UK, EU, and NATO jointly attributed the attack to China's Ministry of State Security.