Most small businesses think about backups in simple terms: either the data is backed up or it is not.
The October 2026 ConnectWise Cloud Backup incident shows why businesses also need to ask a second question: Can we securely access and restore that backup when something goes wrong?
ConnectWise reported that it identified unauthorized access to application identities associated with its Cloud Backup service, formerly known as SkyKick. The company suspended Cloud Backup and temporarily suspended two connected services, SaaS Security and Cloud Management, while it investigated and strengthened security controls.
As of October 20, ConnectWise said existing backup archives remained encrypted, isolated, and preserved, with no indication that the stored archives had been compromised. However, scheduled backups, archive access, and restores remained unavailable during the service interruption.
For a small business, that distinction matters. Preserved backup data is good news, but temporarily losing the ability to create new backups or restore files can still create a serious operational gap.
Cloud backup platforms need permission to connect to services such as Microsoft 365. Instead of having an employee manually sign in every time, the backup platform uses a digital identity that allows the application to perform approved tasks automatically.
Depending on the permissions granted, an application identity may be able to access mailboxes, files, user information, or administrative functions.
That access is necessary for many useful business applications. It also means application identities deserve the same attention as administrator accounts. If one is misused, changing an employee’s password may not be enough to remove the access.
Microsoft recommends reviewing application permissions and audit records so administrators can identify unexpected access, permission changes, or newly added credentials.
According to ConnectWise’s October 20 advisory, the company:
ConnectWise also warned that disabling the affected connections prevents new authentication but does not automatically reverse changes that may have been made earlier.
That is why an audit of connected Microsoft 365 environments is important.
Business owners do not need to conduct a technical investigation themselves. They should contact the person or company responsible for their Microsoft 365 administration and ask a few direct questions.
Ask whether your organization uses ConnectWise Cloud Backup, the former SkyKick Cloud Backup service, SaaS Security, or Cloud Management.
Some businesses purchase these services through an IT provider or reseller and may not recognize the vendor’s name.
Confirm the date and time of the most recent successful backup. If scheduled backups are temporarily unavailable, identify which business data is affected and how long the gap has lasted.
Do not assume that a green status from last week means today’s backup completed.
The administrator should follow the current vendor guidance and examine relevant sign-in records, application permissions, administrator roles, credentials, and unusual mailbox changes.
This work should be performed by someone who understands Microsoft 365 administration. Removing the wrong application or permission without a plan could interrupt legitimate business systems.
Identify the files, mailboxes, calendars, and records that would be most urgent after accidental deletion, ransomware, or account compromise.
Ask whether another protected copy exists and whether it can be restored independently. A backup strategy is more resilient when one provider, account, or application cannot block every recovery option.
A successful backup notification is not the same as a successful recovery test.
Businesses should periodically test whether important files and mailboxes can actually be recovered. The test should also document who can authorize a restore and how the business would operate if the primary backup portal were temporarily unavailable.
A concerned employee or business owner may be tempted to remove connected applications immediately. That can create additional problems if the application supports backups, email security, account management, or another important workflow.
Use the vendor’s current instructions and coordinate changes with the administrator responsible for your Microsoft 365 environment.
ConnectWise specifically advised customers not to reconnect affected applications until formal restoration instructions are provided. Because the investigation is evolving, administrators should continue checking the official ConnectWise Trust Center rather than relying on an old screenshot or social media post.
A dependable backup plan should answer more than “Where is our data copied?”
It should also answer:
Cloud backups remain an important part of small-business resilience. This incident does not mean businesses should abandon cloud services. It means backup platforms, application permissions, and recovery procedures should be managed as critical business systems.
Himala and his team at Cybernetic Networks have been amazing. We have been a customer of Cybernetic Networks for well over 14 years now, both personally and professionally. Himala and his team are professional, reachable and on the cutting edge of technology. We have enjoyed doing business with Cybernetic Networks for many years and still rely on their knowledge, skills and technology every day
Himala and his Cybernetic team have never let me down! For over 10 years now they have been fixing my technical issues, set up all my new networks and computers and have safeguarded me from any hackers or malware. You can trust this company to navigate you as your company grows and to keep you on track with the latest in security and safety
I am a solo practicing neurologist and have had all my IT needs covered through Cybernetic Networks since 2007. They are the best! All of their tech support staff is extremely knowledgeable and efficient. Just as importantly, they are quickly responsive whenever we need their assistance. I couldn’t be happier with their service and give them my highest recommendation!
I couldn't be happier with Cybernetics - they are experts, always respond quickly , and solves any issues I have.
Cybernetic Networks has been advising and supporting all our IT issues and purchases for the last 18 years. They are very responsive and extremely knowledgeable- always providing us with timely services.
It is not often you find small business companies that are not only rewarding to work with, but also have integrity, truth and skill. I have worked with this company for over 20 years, and the service is outstanding. I can easily recommend that if you need an IT company, this is the one to get. Full STOP! Look no further, you will be happy that you did. Sue Myhelic, Gulf Breeze Real Estate, Naples, Florida.
Himala and his team from Cybernetic Networks, Inc. has been an integral part of our successful retail business for the past 20 years. He is extraordinarily knowledgable and always available for our IT needs. Thanks to Himala and his team we are always up and running.
