Greenwood

ConnectWise is investigating recent attempts of unauthorized access associated with the ConnectWise Cloud Backup environment. Upon detecting this threat, we promptly initiated our incident response procedures. Containment measures are in place, and our investigation continues. At this time, there is no indication that partner backup data has been accessed. Our engineering teams are continuing to explore the nature and scope of the issue. Our investigation is ongoing, and we will provide additional information as appropriate. We appreciate your patience while we work through this process. Indicators of Compromise (IOCs) The following indicators have been associated with the reported suspicious authentication activity . Source IP Address 144.172.64.128 Observed User Agents Python-urllib/3.12 python-requests/2.31 These indicators are provided transparency to assist with security monitoring and investigation. Their presence alone does not establish unauthorized activity or confirm compromise.

We are continuing to monitor for any further issues.

We have identified the issue of users being unable to select an existing WhatsApp Business Account during WhatsApp Embedded Signup when configuring WhatsApp senders. Customers can still create a new WhatsApp Business Account, and as a workaround, customers may search by the WhatsApp Business Account name or a connected phone number instead of the account ID. We are updating customer guidance to reflect this experience. We will provide another update in 2 hours or as soon as more information becomes available.

We have another update on the recovery of missing or delayed AI Agent conversation messages. We are monitoring the backlog recovery process and anticipate the new completion date to be October 21st, 2026. Thank you for your understanding and patience. We'll be certain to update when the backlog processing is complete or any new information here.

Scheduled maintenance is currently in progress. We will provide updates as necessary.