Due to a vulnerability in Entra ID, attackers could have gained access to any tenants as administrators. The security issue has been resolved for some time.