Please note that this attack only applied to Microsoft Exchange servers, and did not apply to Microsoft Exchange Online (which includes Microsoft 365, formerly Office 365).

Our own Microsoft Exchange servers were updated as soon as this attack was announced. The weaknesses identified by Microsoft were immediately addressed. As of this time our Exchange servers are fully up to date and compliant in reaction to the attack.

We have checked for any unusual behaviour on these servers and no issues have been reported by our clients. Neither our engineers or developers have been able to find anything that may indicate a breach. Therefore, we are happy to conclude that we were able to avoid any attack in this instance.

You can read more about the HAFNIUM attack and Microsoft’s response on microsoft.com.