Microsoft says its systems were infiltrated’beyond just the presence of malicious SolarWinds code’. The company says that the hacked account granting such access did n’t have permission to modify any code or systems.

The attack exposed an extensive list of sensitive organizations. Today’s disclosure from Microsoft shows we’ll still be unraveling the attack’s implications for weeks and months to come.