Most Microsoft 365 break-ins we see didn’t need anything clever. They worked because a few settings were never switched on.
1. Two-step login for everyone
Multi-factor authentication (MFA) stops most password attacks. Make sure it covers every account, including the old shared “info@” mailbox.
2. Separate admin accounts
The account you use for daily email shouldn’t also be the global admin. Keep admin rights to as few people as possible.
3. Check for forwarding rules
Attackers often set up a rule that quietly forwards your mail to them. Review mailbox rules and block automatic forwarding outside the business.
4. Tighten sharing
Files shared with “anyone with the link” can travel anywhere. Set sensible defaults in OneDrive and SharePoint.
5. Back up separately
Microsoft keeps your service running, but deleted or encrypted data may not be recoverable for long. A separate backup is cheap insurance.
Want us to check yours? Microsoft 365 security or book a free check.