Fortinet Data Leak Confirmed

Fortinet, a major player in the cybersecurity industry, has acknowledged a data breach following reports of a hacker stealing 440 GB of files from the Microsoft Sharepoint server. The breach has raised concerns about the security of sensitive information stored by the company.

Fortinet is a leading provider of secure network products, including firewalls, routers, and VPN devices. The company also offers solutions for SIEM, Networks, and EDR/XDR, along with consulting services. This incident highlights the importance of robust cybersecurity measures in protecting valuable data.

The breach came to light when an unidentified hacker disclosed details of the stolen data on a hacker forum. The hacker claimed to have accessed 440 GB of information from Azure Sharepoint, as well as provided login details for an alleged storage S3 where the stolen files are believed to be located.

Referred to as Fortibitch, the individual behind the breach allegedly attempted to extort Fortinet for a ransom to prevent the publication of the stolen data. However, the company opted not to pay the ransom demand, leading to the disclosure of the breach.

In response to inquiries regarding the incident, Fortinet confirmed the unauthorized access to customer data stored in a “Cloud Storage of Files of the Third Party”. A company representative stated, “An unknown individual gained access to a limited number of files in the third-party cloud storage, containing some data related to a small group of Fortinet customers.”

Subsequently, an update was posted on the Fortinet website, acknowledging that less than 0.3% of the client base was impacted by the breach. Fortunately, no harmful activities targeting customers were reported, and there was no evidence of data encryption, malware usage, or access to Fortinet’s corporate network in connection with the incident.

For more information, visit: Fortinet Security Incident Update