SECTOR PROFILE
Target Sector: Information Technology, Cloud Services
Court filings, technical advisories, and enforcement actions documenting cyber intrusions against Information Technology, Cloud Services organizations.
Key Facts
Total Cases
1
Prosecution records
Identified Losses
$150.0 million
Court & SEC estimates
- 1 documented prosecution cases targeting the Information Technology, Cloud Services sector.
- Cumulative reported financial losses exceed $150.0 million.
- Documented from federal indictments and SEC Form 8-K disclosures.
Documented Incidents
investigation 2024-01-19
Microsoft Corporate Executive Email Intrusion (Midnight Blizzard / SVR)
Russian Foreign Intelligence Service (SVR / Midnight Blizzard / APT29) compromised Microsoft corporate email systems via a password spray campaign against a legacy non-production test tenant lacking multi-factor authentication. Attackers leveraged the test account's permissions to grant full OAuth app-level access, reading executive emails and exfiltrating source code and customer cryptographic secrets.
3 techniques
View case details →