This notification is to inform you about a recent security incident that occurred within our organization. We take the security and privacy of your data seriously, and we want to provide you with a detailed overview of the incident.
Microsoft has published details of how a China-based threat actor known as Storm-0558 was able to exploit security gaps and acquire a Microsoft account (MSA) consumer signing key. This key was then used to forge tokens and gain unauthorized access to enterprise email accounts of multiple Microsoft customers. Storm-0558 is a cyber espionage group that has been active since at least 2021 and has targeted various organizations, including US and European diplomatic entities, legislative governing bodies, media companies, internet service providers, and telecommunications equipment manufacturers. The group has employed various tactics such as credential ha