Microsoft says threat actor accessed employee, executive email accounts

Microsoft said in a regulatory filing that, on January 12, 2024, it detected that beginning in late November 2023, a nation-state associated threat actor had gained access to and exfiltrated information from a very small percentage of employee email accounts including members of its senior leadership team and employees in its cybersecurity, legal, and other functions, on the basis of preliminary analysis. “We were able to remove the threat actor’s access to the email accounts on or about January 13, 2024,” the company said. “We are examining the information accessed to determine the impact of the incident. We also continue to investigate the extent of the incident. We have notified and are working with law enforcement. We are also notifying relevant regulatory authorities with respect to unauthorized access to personal information. As of the date of this filing, the incident has not had a material impact on the Company’s operations. The Company has not yet determined whether the incident is reasonably likely to materially impact the Company’s financial condition or results of operations.”