Following an independent review of the summer 2023 Microsoft Exchange Online data breach that exposed EU and U.S. government officials' emails, the U.S. Cyber Safety Review Board recommended all cloud service providers improve security and build resilience against potential attacks. The Cybersecurity and Infrastructure Agency also plans to develop practices for major cloud service providers in line with the CSRB's recommendations.