Statement on MD-2023-0802 China-based Threat actor Storm-0558 Targets Customer Emails

August 2, 2023

Information

Microsoft investigations determined that Storm-0558 gained access to customer email accounts using Outlook Web Access in Exchange Online (OWA) and Outlook.com by forging authentication tokens to access user email. More info at Microsoft Security Blog

Risk

Low

Response

Melissa Data Corporation (“Melissa”) was not impacted by Microsoft Azure Breach. Any Melissa commercial web services or products were not impacted by this vulnerability.

Melissa will continue to follow all guidance provided for this vulnerability as necessary to prevent any future risks.