← Microsoft

Chinese hackers breach U.S. agencies via Microsoft Cloud (Storm-0558)

2023 Unknown records affected Share on X

Data compromised

Email addresses

Technical writeup

Microsoft disclosed that Chinese group Storm-0558 spied on U.S. government agencies via a vulnerability in Microsoft cloud services. Attack detected in June; targeted State and Commerce department emails.

Root cause

Cloud service vulnerability exploited by Storm-0558.

References