BMC Daily Cyber News | Forgotten Microsoft 365 accounts expose emails, chats and files

Forgotten Microsoft 365 accounts expose emails, chats and files

September 25, 2026 / 01:29/E138

Ghost Service Accounts Enable M365 Data Theft in Chile. Attackers compromised seven forgotten functional and service accounts at a major Chilean retailer after failing to breach any employee accounts.

Daily Cyber News: Ghost Service Accounts Enable M365 Data Theft in Chile

Attackers compromised seven forgotten functional and service accounts at a major Chilean retailer after failing to breach any employee accounts. The broader campaign tested more than five thousand seven hundred accounts across 28 Microsoft 365 tenants using credential spraying and an open-source toolkit. Six of the seven successful compromises reportedly happened within seven minutes, pointing to weak or default credentials and missing multifactor authentication.

Key context: The attackers then used those accounts to extract emails, Teams conversations and OneDrive files.

For more cybersecurity news and the full Daily Cyber newsletter, visit DailyCyber.News.
Cybersecurity training, courses, books, and resources: BareMetalCyber.com.

Topics: cybersecurity news, cybersecurity, cyber risk, microsoft 365, Ghost Service Accounts Enable M365 Data, Ghost, Service, Accounts, Enable, M365.

Forgotten Microsoft 365 accounts expose emails, chats and files

Broadcast by

headphones Listen Anywhere

Listen Anywhere