16/10/2026
URGENT: SkyKick backup service breach. Here's what you should do ASAP:
Note: BizGuard IT Assurance customers need not worry as you aren't impacted, but please share for visibility.
If your IT provider uses SkyKick to backup your data, ensure they are aware of this breach. If you aren't sure whether they use SkyKick, then ask them (it will sometimes be itemised on your monthly invoice, but not always).
If you self-manage your own Microsoft 365 then you can use Global Admin access to check for the app as follows:
1. Sign into Microsoft Entra portal (link in comments) and navigate to Enterprise Apps on the left
2. Clear the Application type == Enterprise Applications filter by clicking the X next to it - the app list should get a lot longer
3. Now search for the word SkyKick
4. If this returns no results, search for the word ConnectWise (for some newer installs the app may be called ConnectWise Cloud Backup)
If you see the apps and no longer use SkyKick for backups, they can be safely deleted (note doing so will cease any active backup services).
If you prefer to disable them, click on the app, then on the left panel select Properties, and set "Enabled for users to sign-in?" to "No" then click Save.
If you are an IT provider, we recommend using CIPP or similar tool to scan all your tenants, further technical guidance can be found here at the link in the comments.
