Microsoft disclosed on Friday that a Russian intelligence group, Nobelium, breached the email accounts of some of the company\u2019s top executives. The same group previously targeted government supplier SolarWinds in 2020. The attack, detected last week, led to unauthorized access to a small percentage of Microsoft\u2019s corporate email accounts, including those of senior leadership, legal, cybersecurity, and other functions.<\/p>\n
Microsoft emphasized that it does not believe the attack had a material impact on its operations, and no signs indicate access to customer data, production systems, or proprietary source code. The breach coincided with the implementation of new U.S. regulations requiring companies to disclose cybersecurity incidents promptly.<\/p>\n
Nobelium, also known as APT29 or Cozy Bear, is associated with the Russian foreign intelligence service SVR. The group gained infamy for the SolarWinds breach, where malicious code was added to software updates used by several U.S. government agencies, including Microsoft itself. The recent attack did not compromise customer data, according to Microsoft.<\/p>\n
In late November, Nobelium accessed a non-production test tenant account and utilized its permissions to access a limited number of corporate email accounts. Microsoft\u2019s senior leadership team, including CEO Satya Nadella, CFO Amy Hood, and President Brad Smith, were among the affected members.<\/p>\n
Microsoft clarified that it had not found evidence of customer data compromise, and the incident did not extend to production systems or proprietary source code. The company is collaborating with law enforcement, regulators, and cybersecurity partners to investigate the breach further.<\/p>\n
While the FBI is aware of the incident and working with federal partners, Senator Ron Wyden criticized Microsoft, calling the breach \u201cwholly avoidable\u201d and pointing to the company\u2019s \u201cnegligent cybersecurity practices.\u201d Wyden urged a reevaluation of the U.S. government\u2019s reliance on Microsoft, emphasizing the need for multi-factor authentication.<\/p>\n
Microsoft stated it would take additional actions based on the investigation\u2019s outcomes and continue cooperating with law enforcement and regulators.<\/p>\n
For now, the breach does not seem to have disrupted Microsoft\u2019s core operations, and the company is actively managing the aftermath of the incident.<\/p>\n","protected":false},"excerpt":{"rendered":"
Russian Hacking Group Nobelium Accessed Email Accounts of Microsoft Executives, Including Senior Leadership<\/p>\n","protected":false},"author":331,"featured_media":26566,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9],"tags":[966,1333],"class_list":["post-26584","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tech","tag-microsoft","tag-satya-nadella"],"reading_time":"2 min read","_links":{"self":[{"href":"https:\/\/www.businessupturn.com\/usa\/wp-json\/wp\/v2\/posts\/26584","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.businessupturn.com\/usa\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.businessupturn.com\/usa\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.businessupturn.com\/usa\/wp-json\/wp\/v2\/users\/331"}],"replies":[{"embeddable":true,"href":"https:\/\/www.businessupturn.com\/usa\/wp-json\/wp\/v2\/comments?post=26584"}],"version-history":[{"count":0,"href":"https:\/\/www.businessupturn.com\/usa\/wp-json\/wp\/v2\/posts\/26584\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.businessupturn.com\/usa\/wp-json\/wp\/v2\/media\/26566"}],"wp:attachment":[{"href":"https:\/\/www.businessupturn.com\/usa\/wp-json\/wp\/v2\/media?parent=26584"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.businessupturn.com\/usa\/wp-json\/wp\/v2\/categories?post=26584"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.businessupturn.com\/usa\/wp-json\/wp\/v2\/tags?post=26584"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}