# Hackers breach thousands of Microsoft customers around the world | Tech News (HT Tech)

> Researchers say in the final phases of the attack, the hackers appeared to have automated the process, scooping up tens of thousands of new victims around the world in a matter of days.

# Hackers breach thousands of Microsoft customers around the world

## Researchers say in the final phases of the attack, the hackers appeared to have automated the process, scooping up tens of thousands of new victims around the world in a matter of days.

Aug 21 2022, 15:32 IST

![Follow on Facebook](https://images.hindustantimes.com/tech/static/revamp/images/png/follow-us-facebook.png)

![Follow on Facebook](https://images.hindustantimes.com/tech/static/revamp/images/png/follow-us-facebook-hover.png)

![Share](https://images.hindustantimes.com/tech/static/revamp/images/png/Share.png)

![Share](https://images.hindustantimes.com/tech/static/revamp/images/png/Shareclicked.png)

![Share on WhatsApp](https://images.hindustantimes.com/tech/static/revamp/images/png/whatsapp.png)

![Share on WhatsApp](https://images.hindustantimes.com/tech/static/revamp/images/png/whatsapp-hover.png)

![Share on Twitter](https://images.hindustantimes.com/tech/static/revamp/images/png/twitter.png)

![Share on Twitter](https://images.hindustantimes.com/tech/static/revamp/images/png/twitter-hover.png)

![Share on Facebook](https://images.hindustantimes.com/tech/static/revamp/images/png/facebook.png)

![Share on Facebook](https://images.hindustantimes.com/tech/static/revamp/images/png/facebook-hover.png)

![Bookmark](https://images.hindustantimes.com/tech/static/revamp/images/png/Bookmark.png)

![Bookmarked](https://images.hindustantimes.com/tech/static/revamp/images/png/Bookmarked.png)

![White House says closely following Microsoft email breach by Chinese hackers](https://images.hindustantimes.com/tech/img/2021/03/07/1600x900/hacker-2300772_1920_1611106949635_1611106974375_1615082288933.jpg)

White House says closely following Microsoft email breach by Chinese hackers

![Author Photo](https://images.hindustantimes.com/tech/static/revamp/images/png/HTTech-new-circle-logo.png)

### By BLOOMBERG

A sophisticated attack on Microsoft Corp.’s widely used business email software is morphing into a global cybersecurity crisis, as hackers race to infect as many victims as possible before companies can secure their computer systems.

The attack, which Microsoft has said started with a Chinese government-backed hacking group, has so far claimed at least 60,000 known victims globally, according a former senior U.S. official with knowledge of the investigation. Many of them appear to be small or medium-sized businesses caught in a wide net the attackers cast as Microsoft worked to shut down the hack.

Victims identified so far include banks and electricity providers, as well as senior citizen homes and an ice cream company, according to Huntress, a Ellicott City, Maryland-based firm that monitors the security of customers, in a blog post Friday.

Also read

click here.

One U.S. cybersecurity company which asked not to be named said its experts alone were working with at least 50 victims, trying to quickly determine what data the hackers may have taken while also trying to eject them. The rapidly escalating attack drew the concern of U.S. national security officials, in part because the hackers were able to hit so many victims so quickly.

“We are undertaking a whole of government response to assess and address the impact,” a White House official wrote in an email on Saturday. “This is an active threat still developing and we urge network operators to take it very seriously.”

ALSO READ: Microsoft doubles down on protecting users from Excel macro malware

The Chinese hacking group, which Microsoft calls Hafnium, appears to have been breaking into private and government computer networks through the company’s popular Exchange email software for a number of months, initially targeting only a small number of victims, according to Steven Adair, head of the northern Virginia-based Volexity. The cybersecurity company helped Microsoft identify the flaws being used by the hackers for which the software giant issued a fix on Tuesday.

The result is a second cybersecurity crisis coming just months after suspected Russian hackers breached nine federal agencies and at least 100 companies through tampered updates from IT management software maker SolarWinds LLC. Cybersecurity experts that defend the world’s computer systems expressed a growing sense of frustration and exhaustion.

‘Getting Tired’

“The good guys are getting tired,” said Charles Carmakal, a senior vice president at FireEye Inc., the Milpitas, California-based cybersecurity company.

Asked about Microsoft’s attribution of the attack to China, a Chinese foreign ministry spokesman said Wednesday that the country “firmly opposes and combats cyber attacks and cyber theft in all forms” and suggested that blaming a particular nation was a “highly senstive political issue.”

ALSO READ: An Indian researcher just got $50,000 from Microsoft: Find out why

Both the most recent incident and the SolarWinds attack show the fragility of modern networks and sophistication of state-sponsored hackers to identify hard-to-find vulnerabilities or even create them to conduct espionage. They also involve complex cyberattacks, with an initial blast radius of large numbers of computers which is then narrowed as the attackers focus their efforts, which can take affected organizations weeks or months to resolve.

In the case of the Microsoft bugs, simply applying the company-provided updates won’t remove the attackers from a network. A review of affected systems is required, Carmakal said. And the White House emphasized the same thing, including tweets from the National Security Council urging the growing list of victims to carefully comb through their computers for signs of the attackers.Initially, the Chinese hackers appeared to be targeting high value intelligence targets in the U.S., Adair said. About a week ago, everything changed. Other unidentified hacking groups began hitting thousands of victims over a short period, inserting hidden software that could give them access later, he said.

‘Mass Exploitation’

“They went to town and started doing mass exploitation -- indiscriminate attacks compromising exchange servers, literally around the world, with no regard to purpose or size or industry,” Adair said. “They were hitting any and every server that they could.”

Adair said that other hacking groups may have found the same flaws and began their own attacks -- or that China may have wanted to capture as many victims as possible, then sort out which had intelligence value.

Either way, the attacks were so successful -- and so rapid -- that the hackers appear to have found a way to automate the process. “If you are running an Exchange server, you most likely are a victim,” he said.

Data from other security companies suggest that the scope of the attacks may not end up being quite that bad. Researchers from Huntress examined about 3,000 vulnerable servers on its partners’ networks and found about 350 infections -- or just over 10%.While the SolarWinds hackers infected organizations of all sizes, many of the latest batch of victims are small-to medium-sized business and local government agencies. Organizations that could be most impacted are those that have an email server that’s running the vulnerable software and exposed directly to the internet, a risky setup that larger ones usually avoid.

Smaller organizations are “struggling already due to Covid shutdowns -- this exacerbates an already bad situation,” said Jim McMurry, founder of Milton Security Group Inc., a cybersecurity monitoring service in Southern California. “I know from working with a few customers that this is consuming a great deal of time to track down, clean and ensure they were not affected outside of the initial attack vector.”

McMurry said the issue is “very bad” but added that the damage should be mitigated somewhat by the fact that “this was patchable, it was fixable.”

Microsoft said customers that use its cloud-based email system are not affected.The use of automation to launch very sophisticated attacks may mark a new, frightening era in cybersecurity, one that could overwhelm the limited resources of defenders, several experts said.

Some of the initial infections appear to have been the result of automated scanning and installation of malware, said Alex Stamos, a cybersecurity consultant. Investigators will be looking for infections that led to hackers taking the next step and stealing data -- such as e-mail archives -– and searching them for any valuable information later, he said.

“If I was running one of these teams, I would be pulling down email as quickly as possible indiscriminately and then mining them for gold,” Stamos said.

By William Turton and Jordan Robertson

Catch all the Latest Tech News, Mobile News, Laptop News, Gaming news, Wearables News , How To News, also keep up with us on Whatsapp channel,Twitter, Facebook, Google News, and Instagram. For our latest videos, subscribe to our YouTube channel.

07 Mar, 07:33 IST

microsoft

cybersecurity

![HT Tech Awards](https://tech.hindustantimes.com/ht-tech-power-list-awards-2026/httech-awards-banner-new.webp)

### Related Stories

07 Oct 2026

71,615,082,211,768

NEXT ARTICLE BEGINS

![View all](https://images.hindustantimes.com/tech/static/revamp/images/png/view-all-icon.png)

## Tips & Tricks

![Ghibli-style art](https://images.hindustantimes.com/tech/img/2025/03/28/414x233/ChatGPT_Ghibli_style_images_1743161814450_1743161814596.jpg)

### How to turn your photos into Ghibli-style art with ChatGPT for free: Step-by-step guide

![How to create an invitation using iPhone’s new Apple Invites app- Step-by-step guide](https://images.hindustantimes.com/tech/img/2025/02/14/414x233/invites_1738728829564_1739543695649.png)

### How to create an invitation using iPhone’s new Apple Invites app- Step-by-step guide

![Apple TV app arrives on Android phones and tablets: What you get and how to install it](https://images.hindustantimes.com/tech/img/2025/02/13/414x233/unnamed_1739426557335_1739426567634.jpg)

### Apple TV app arrives on Android phones and tablets: What you get and how to install it

![Vodafone Idea OTT plans](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Vodafone Idea users can now stream 17 OTT apps with one subscription: Here's how

![Android data transfer methods](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### How to transfer data from one Android to another using Google backup, USB-C cable, and more

## Editor’s Pick

![iPhone 16e launched with A18 chip, Apple AI—bringing flagship power on a budget: Check specs, price](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### iPhone 16e launched in India: All details about the new budget mobile from Apple

![DeepSeek was founded in China with only a fraction of the budget of the top AI companies in the US.](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### DeepSeek AI: How it works, who’s behind it, how it’s different from ChatGPT, and its big US market impact explained

![iPhone 17 Air likely to get this feature that iPhone 17 Pro models may miss out on](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### iPhone 17 Air likely to get this feature that iPhone 17 Pro models may miss out on

![Google Whisk AI explained: How remixing works, availability, and how it differs from Gemini](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Google Whisk AI explained: How remixing works, availability, and how it differs from Gemini

![iOS 18.4 beta arriving soon: Know why it is the biggest iPhone update](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### iOS 18.4 beta arriving soon: Know why it is the biggest iPhone update

## Trending Stories

![Airtel 5G SIM card will now be delivered in 10 minutes with Blinkit- How to order](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Airtel 5G SIM card will now be delivered in 10 minutes with Blinkit- How to order

![Infinix Note 50s 5G+](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Infinix Note 50s 5G+ set to launch in India with 64MP camera and MediaTek Dimensity 7300 SoC

![Xiaomi X Pro QLED Series sale starts in India: Check price, availability, and more](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Xiaomi X Pro QLED Series sale starts in India: Check price, availability, and more

![Apple Intelligence AI training](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Apple plans to train AI using your on-device data without accessing personal content or emails: Report

![CMF Buds 2](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### CMF Buds 2 key features and price revealed ahead of April 28 launch: Details inside

keep up with tech

![Facebook](https://images.hindustantimes.com/tech/static/revamp/images/png/tech-facebook.png)

![Twitter](https://images.hindustantimes.com/tech/static/revamp/images/png/tech-twitter.png)

![WhatsApp](https://images.hindustantimes.com/tech/static/revamp/images/png/tech-whatsApp.png)

![Facebook](https://images.hindustantimes.com/tech/static/revamp/images/png/tech-facebook.png)

## Gaming

![Check out these five gaming monitors under  <span class='webrupee'>₹</span>20,000,](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Top 5 gaming monitors under ₹20000 you should consider

![gaming consoles](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Grab gaming consoles at discounted rates during Amazon Great Indian Festival: Up to 72% off

![Pokémon GO Wild Area 2025](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Pokémon GO Wild Area 2025 to bring Grimmsnarl family, Shiny Hatenna, and global challenges

![Shade Silver](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Shade Silver free on Steam for a limited time: Here’s how to get it

![Call of duty](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Call of Duty: Black Ops 7 skips Switch 2 at launch, release date and price leak

![View all](https://images.hindustantimes.com/tech/static/revamp/images/png/view-all-icon.png)

## Trending News

### Airtel 5G SIM card will now be delivered in 10 minutes with Blinkit- How to order

![Airtel 5G SIM card will now be delivered in 10 minutes with Blinkit- How to order](https://images.livemint.com/static/static/1x1_img.gif)

### Infinix Note 50s 5G+ set to launch in India with 64MP camera and MediaTek Dimensity 7300 SoC

![Infinix Note 50s 5G+](https://images.livemint.com/static/static/1x1_img.gif)

### Xiaomi X Pro QLED Series sale starts in India: Check price, availability, and more

![Xiaomi X Pro QLED Series sale starts in India: Check price, availability, and more](https://images.livemint.com/static/static/1x1_img.gif)

### Apple plans to train AI using your on-device data without accessing personal content or emails: Report

![Apple Intelligence AI training](https://images.livemint.com/static/static/1x1_img.gif)

### CMF Buds 2 key features and price revealed ahead of April 28 launch: Details inside

![CMF Buds 2](https://images.livemint.com/static/static/1x1_img.gif)

## Trending Gadgets

Mobiles

Laptops

Tablets

![HT Tech](https://images.hindustantimes.com/tech/static/revamp/images/png/HT_tech-new.gif)

- https://tech.hindustantimes.com/tech/news/hackers-breach-thousands-of-microsoft-customers-around-the-world-71615082211768.html