Hackers Compromise 97 Microsoft 365 Accounts

Cybersecurity researchers disclosed a campaign where attackers compromised 97 Microsoft 365 accounts across 79 organizations between July 14 and September 22, 2026. The group, Huntress, traced over 200,000 failed login attempts to a Romanian IP range and noted 48 rogue Entra devices were registered. In 19 organizations, existing multi-factor authentication methods were removed within three hours of the initial breach.