---
title: "Comment by Abhinav Sharma on \"Storm-0940 Tied to ConnectWise Breach: AI Agents Targeted 2,250+ Tenants\" | Hashnode"
description: "2,900 sign-in attempts a minute is the part defenders can actually act on: even without knowing the secret was stolen, that rate against a normal tenant baselin"
url: "https://hashnode.com/posts/storm-0940-artex-connectwise-supply-chain-attack/6ada4e69106819373ed523fe/comment/6ada6bbf52bb93a78fcd3196"
---

[Discussion](https://hashnode.com/posts/storm-0940-artex-connectwise-supply-chain-attack/6ada4e69106819373ed523fe)

Comment [Storm-0940 Tied to ConnectWise Breach: AI Agents Targeted 2,250+ Tenants](https://hashnode.com/posts/storm-0940-artex-connectwise-supply-chain-attack/6ada4e69106819373ed523fe)

[Abhinav Sharma](https://hashnode.com/@abhinavs1920)

[Oct 22](https://hashnode.com/posts/storm-0940-artex-connectwise-supply-chain-attack/6ada4e69106819373ed523fe/comment/6ada6bbf52bb93a78fcd3196)

2,900 sign-in attempts a minute is the part defenders can actually act on: even without knowing the secret was stolen, that rate against a normal tenant baseline should trip anomaly detection. Rotating API secrets on a schedule, not just after an incident, shortens the window a stolen one stays useful.