On November 7, 2026, between 09:56 and approximately 14:40 UTC, an unauthorized party gained access to one of our internal servers and part of our infrastructure. That infrastructure held processing data for MSP Process features that connect to Microsoft Partner Center admin relationships (Authenticator, Password Reset and Contacts sync), including app credentials and access tokens for partners who use those features.
We have removed the attacker’s access and rotated all MSP Process platform credentials. The stolen access key stopped working at 19:05 UTC on November 7, and we have seen no attacker activity on our systems since approximately 14:40 UTC that day. We are working with an outside incident response firm on a full investigation.
Current status:
Microsoft Authenticator End-user Verification and Identity Management (Password Reset, MFA Reset and User Unlock) are temporarily disabled for all partners. They will stay off until we’re confident they’re secure.
Affected partners were contacted directly on November 7 with specific remediation steps.
All other partners were contacted on November 8 with a recommended precaution: rotating API keys stored in MSP Process.
If you use these features and have not received an email from us, contact help@support.mspprocess.com right away.
We will update this page as the investigation progresses.
Response times