EmpiricalRequires evidence

In this incident the wrong numbers travelled and the corrections did not. Microsoft's own 21 October 2026 report describes a password-spray campaign against 327 accounts across eight organisations, while secondary outlets and X posts reported more than 2,250 Microsoft 365 tenants; the uncaveated X summary of the CyberCartel report reached 338,534 views while the post observing that stolen credentials found in the group's systems are not 400 confirmed breaches reached 78.

Narrative and audience