Archive · 23 Jul 2025
Microsoft SharePoint Hack Affects 400 Organizations, Blames China
Imagine hackers found a way to break into Microsoft's SharePoint, a system used by many companies and governments.
They've already broken into about 400 places, including some in the US.
These hackers can steal secrets or pretend to be someone else.
Microsoft says these attacks are coming from China, but China says they don't do that and want proof.
It's like a secret spy game online, and now lots of people are trying to figure out who did it and how to stop it.
Hackers exploited a vulnerability in Microsoft SharePoint servers, affecting approximately 400 organizations.
Victims include US government agencies, corporations, and entities in various countries.
The breaches allow access to SharePoint servers, potentially leading to data theft and impersonation.
Microsoft blamed Chinese state-sponsored hackers for the attacks.
China denies involvement and urges evidence-based conclusions on cyber incidents.
- Who
- Hackers, with Microsoft attributing the attacks to Chinese state-sponsored groups.
- What
- Exploitation of a security vulnerability in Microsoft SharePoint servers.
- When
- The attacks are ongoing, with the number of victims rapidly increasing.
- Where
- The attacks have affected organizations worldwide, with a significant number in the US.
- Why
- To access SharePoint servers, steal data, and potentially impersonate users.
Microsoft/US Perspective
China's Perspective
Attribution of Responsibility
Microsoft/US Perspective
Chinese-backed hackers are responsible for the attacks on SharePoint servers.
China's Perspective
The Chinese government does not condone, nor does it participate in cyber attacks or cyber crime.
- Affected Organizations
- Approximately 400
- Primary Target
- Government agencies, corporations
- Vulnerability
- Microsoft SharePoint servers
- Attribution
- Chinese state-sponsored hackers
- Microsoft Response
- Issued patches