ConnectWise hit by nation-state cyberattack, some ScreenConnect customer systems affected

• Connectwise notified customers about a state-sponsored attack
• A "small number" of ScreenConnect customers were affected
• The company triggered its incident response plan and brought in third party experts

ConnectWise has revealed it recently suffered a cyberattack, likely at the hands of a “sophisticated nation state actor.”

In a short announcement published on its website, the company said it recently learned of “suspicious activity” within its environment, which affected a “very small number” of ScreenConnect customers.

“We have launched an investigation with one of the leading forensic experts, Mandiant,” the announcement says. “We have contacted all affected customers and are coordinating with law enforcement. As part of our work with Mandiant, we implemented enhanced monitoring and hardening measures across our environment.”

Multiple attacks

Other than that, details are scarce. We don’t know which threat actor this is, how they managed to infiltrate ScreenConnect’s infrastructure, how ...