Will the 81M Microsoft 365 login-attempt campaign result in a documented breach by end of 2026?

Bleeping Computer reports an aggressive password-spraying campaign generating over 81 million login attempts against Microsoft 365 accounts over two weeks. This represents large-scale credential attack activity targeting a critical business platform, with potential for widespread account compromise.

Resolution Criteria

Public disclosure of one or more enterprise breaches directly attributed to or coinciding with this Microsoft 365 password-spray campaign, confirmed by CISA, vendor advisory, reputable security researcher, or media investigation.