User account takeover in Office 365 is the most effective way for an attacker to move laterally inside an organization’s network. This kind of account takeover ultimately cause the loss of personal data from organizations in Australia in recent months.