Chinese Hackers Targeted Thousands Through Connectwise Breach

WHO:

TechCrunch - Microsoft attributed the ConnectWise breach to a China-aligned hacker.

Techmeme - Microsoft described the hackers as China-linked and state-aligned; the article identifies ConnectWise as an IT services firm.

Techmeme - The Techmeme article cites AJ Vicens / Reuters.

WHAT:

TechCrunch - Chinese hackers breached ConnectWise and spied on thousands of companies.

TechCrunch - The hackers targeted thousands of ConnectWise customers.

Techmeme - Microsoft said hackers used the AI penetration-testing tool ARTEX to compromise ConnectWise.

Techmeme - Microsoft said the compromise was part of a campaign targeting hundreds of organizations.

HOW:

TechCrunch - The hackers relied on AI agents to rapidly hack into thousands of ConnectWise customers.

Techmeme - The hackers used ARTEX, described as an AI-driven penetration-testing tool, in the campaign.

(UPDATED October 22, 2026 18:11 UTC)

Microsoft says a China-linked, state-aligned hacking group used an artificial-intelligence tool to breach ConnectWise, an IT services firm, and spy on its customers. The company identified the tool as ARTEX, an AI-driven system designed for penetration testing. Microsoft said the attackers used it to compromise ConnectWise as part of a broader campaign targeting hundreds of organizations. The breach put thousands of ConnectWise customers in the hackers’ sights. The attackers relied on AI agents to move quickly through their intrusions, according to details of the incident. Their activity shows how an automated tool can be used to accelerate cyberattacks against a service provider and its customers. Microsoft attributed the operation to a China-aligned actor, describing the hackers as both China-linked and state-aligned.