# Microsoft Reports SkyKick Service Compromise

Microsoft reported a Chinese-linked compromise involving SkyKick, a cloud backup service acquired by ConnectWise. The signal distinguishes the reportedly affected service from ConnectWise’s ScreenConnect remote-support product and notes potential downstream exposure because service providers may have access to customer data and systems. No government agency, solicitation, or contract is identified, but the incident is relevant to procurement teams evaluating cloud and managed-service providers with access to organizational environments.

- Procurement teams can distinguish the reported SkyKick incident from ScreenConnect when assessing vendor risk; the signal does not identify ScreenConnect as the affected product.
- Organizations using cloud backup or other service providers with customer-system access may want to evaluate the access and data dependencies associated with those services.
- The report identifies no specific government procurement opportunity or confirmed scope of downstream impact.

**Jurisdictions:** international
**Industries:** Information Technology
**Topics:** Cybersecurity
**Published:** October 25, 2026

### Vendors
- ConnectWise (Acquirer of SkyKick)
- SkyKick (Cloud backup service reportedly affected)
- Microsoft (Reported the compromise)

### Key Quotes
> ScreenConnect has always been a bit of a mess. Although they have improved how they sign the product (On-prem users need to get it signed on their own) and have really clamped down on rogue installs, which is what causes all these issues.
> — Community commenter

### Sources
- [Chinese-linked hackers compromise ConnectWise, target hundreds in global attack, Microsoft says](https://www.reddit.com/r/cybersecurity/comments/1xfascx/chineselinked_hackers_compromise_connectwise) - reddit-cybersecurity