Although Microsoft initially provided limited information about the incident, it now confirms that no customer data was accessed or compromised. The company believes Storm-1359 likely employed a combination of virtual private servers and rented cloud infrastructure to carry out the attacks. The full extent of the impact and the number of affected Microsoft customers remain unclear.