Unauthorized access to Microsoft 365 mailbox.

Registrant's own systems

Item 8.01 (voluntary)

financial, IP

phishing, stolen credentials

Not exfiltrated

Confirmed

Contained; investigation ongoing.

The account was secured, malicious mailbox rules were disabled, evidence was preserved, and corrective actions are underway.