Home / Incidents / Data breach
ScreenConnect extension abused to breach nearly 50 organisations
Huntress saw attackers reach 288 endpoints at 48 organisations through the third-party RMM+ add-on; ConnectWise disabled it in about 400 partner environments.
- Organisation
- ConnectWise ScreenConnect
- Disclosed
- 12 November 2026
- Affected
- Not stated
- Data
- Remote access to endpoints
- Attacker
- Unknown
- Severity
- major
- Region
- Global
- Source
- The Record ↗
Cite this
Nuffield Consulting, “ScreenConnect extension abused to breach nearly 50 organisations”, The Daily Tech Wire outage & breach log, 12 Nov 2026. https://techwire.nuffieldconsulting.com/incidents/2026-11-12-connectwise-screenconnect-breach/ (retrieved 15 Nov 2026).
This entry summarises public reporting. Please also cite the original source: The Record, https://therecord.media/connectwise-screenconnect-breaches-third-party-tool.
Related incidents
- 11 Nov 2026Baltic SMS provider left 125M messages exposedCSCTelecom · breach · Unknown · 125M records
- 9 Nov 2026Nitori warns 37.62m customer records may have leakedNitori · breach · Unknown · 37.6M records
- 9 Nov 2026Frontline Education breach total rises to over 3 millionFrontline Education · breach · Unknown · 3.1M records
- 7 Nov 2026Crédit Mutuel Arkéa hit via a service providerCrédit Mutuel Arkéa · breach · Unknown
- 6 Nov 2026Chainalysis says credentials and live tokens for all customers were exposedChainalysis · breach · Unknown