Microsoft Server Hack Hit About 100 Organizations, Researchers Say

A man looks at his phone as he passes by the Microsoft stand at the Mobile World Congress trade show in Barcelona, Spain, on March 3, 2025. Bruna Casas/Reuters

WASHINGTON/LONDON—A sweeping cyber espionage operation targeting Microsoft server software compromised about 100 organizations as of the weekend, two of the organizations that helped uncover the campaign said on Monday.

Microsoft on Saturday issued an alert about “active attacks” on self-hosted SharePoint servers, which are widely used by organizations to share documents and collaborate within organizations. SharePoint instances run off of Microsoft servers were unaffected.