With regard to incidents involving Microsoft's cloud services referenced in the "National Cyber Threat Assessment 2025-2026" and, specifically, the compromise of Microsoft Exchange Online during the summer of 2023, the breach of Microsoft's cloud-based enterprise service by Russian state-sponsored actors in January 2024, and the Azure disruption in July 2024: (a) which government departments or agencies were impacted by the compromise of Microsoft Exchange Online in the summer of 2023; (b) which government departments or agencies were impacted by Russian state-sponsored actors accessing Microsoft's corporate email accounts in January 2024; (c) which government departments or agencies were impacted by the Microsoft Azure cloud service disruption in July 2024; and (d) for the incidents in (a), (b), and (c), what was the (i) nature, (ii) date, (iii) duration, of the impact on government operations?
In the House of Commons on September 15th, 2025. See this statement in context.
