ConnectWise is investigating recent attempts of unauthorized access associated with the ConnectWise Cloud Backup environment. Upon detecting this threat, we promptly initiated our incident response procedures. Containment measures are in place, and our investigation continues. At this time, there is no indication that partner backup data has been accessed. Our engineering teams are continuing to explore the nature and scope of the issue. Our investigation is ongoing, and we will provide additional information as appropriate. We appreciate your patience while we work through this process. Indicators of Compromise (IOCs) The following indicators have been associated with the reported suspicious authentication activity . Source IP Address 144.172.64.128 Observed User Agents Python-urllib/3.12 python-requests/2.31 These indicators are provided transparency to assist with security monitoring and investigation. Their presence alone does not establish unauthorized activity or confirm compromise.
The issue has been identified and we continue our work to implement a fix.
Our monitoring systems have detected a potential issue with Flex Agent Copilot Auto Wrap-up Notes. Our engineers have been alerted and are investigating. We will provide an update when we have more details.
Most previously delayed conversation messages have been processed, but some historical messages remain missing and recovery is not yet complete. We paused the historical message recovery process after it caused delays in another part of the service. Those additional delays have now cleared, and our engineers are developing a revised approach to resume recovery while protecting service stability. We currently do not have a revised completion time; however, we will share further update once the revised recovery plan and timeline are confirmed. We apologize for the continued disruption.
Scheduled maintenance is currently in progress. We will provide updates as necessary.