Item 1.05 Material Cybersecurity Incident disclosure filed by Microsoft Corporation regarding Russian state-sponsored threat actor Midnight Blizzard accessing senior leadership email accounts and internal cybersecurity communications.
Microsoft
microsoft.comMicrosoft disclosed an intrusion by Russian foreign intelligence threat group Midnight Blizzard (APT29), accessing senior leadership corporate emails and source code.
Confidence & Source Corroboration
Official Regulatory Filings & Legal Compliance Records
Technical Forensic Briefing
Incident Overview
Microsoft disclosed an intrusion by Russian foreign intelligence threat group Midnight Blizzard (APT29), accessing senior leadership corporate emails and source code.
Compromised Assets & Data Scope
- Primary Data Classes: Senior Leadership Corporate Email Accounts, Cybersecurity Strategy Communications, Source Code Repositories.
Statutory Disclosures & Compliance
- Statutory filing submitted to SEC (Form 8-K (Item 1.05)) under accession 0000789019-24-000004.
Milestone Timeline (4 events logged)
Microsoft security team detects Russian state-sponsored threat actor Midnight Blizzard accessing corporate email systems via legacy OAuth tenant test account.
Microsoft files Form 8-K Item 1.05 detailing Midnight Blizzard intrusion into senior executive email accounts and cybersecurity staff communications.
Microsoft Form 8-K update discloses threat actor used exfiltrated email secrets to gain unauthorized access to internal source code repositories.
Microsoft says threat actors are ahead in the early AI race
Have updated information or a new verifiable source?
This incident record is a flat Markdown file tracked in Git. Propose an update or add a milestone via Pull Request.