Threat Intelligence Brief
Curated summary with source attribution
Source: prnewswire.com
Threat Risk: Medium
Victim: Kiewit Corporation
Incident: Unauthorized access to an employee Microsoft 365 account resulting in a data breach.
Impact: Exposure of sensitive PII, including SSNs and health data, for current and former staff and contractors.
Attacker: Unidentified threat actors
Analysis: The breach originated from the compromise of a single employee’s Microsoft 365 account, indicating a likely failure in MFA or a successful phishing campaign. Once inside, the attacker gained access to highly sensitive PII, including Social Security and health information. This highlights the critical risk of over-privileged user accounts acting as single points of failure for corporate data.
Recommendations: Enforce phishing-resistant Multi-Factor Authentication (MFA) for all cloud productivity accounts.; Implement a strict principle of least privilege to ensure individual accounts cannot access bulk sensitive PII.; Deploy continuous monitoring for anomalous login patterns and large-scale data egress from email or cloud storage.
Source: PRNewswire
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source