It would appear that it is true....

Astonishingly, the hackers are believed to have had access to
Microsoft's network for three months before the breach was detected.

Microsoft says it has referred the attack to the US Federal Bureau of
Investigation (FBI) and is working with the authorities to "protect its
intellectual property".