Commvault Azure cloud breach targets customer secrets
Commvault's Azure-based cloud environment was breached in a zero-day attack exploiting the CVE-2025-3928 vulnerability. Application secrets of some customers were targeted, and Commvault said there was no unauthorized access to customer backup data. The China-linked group Silk Typhoon was named as the attacker, but Commvault did not independently confirm who was behind the attack.
Key facts
- Affected organization
- Commvault
- Incident type
- Hacking & intrusion
- Occurred / detected
- Not confirmed
- Scale of damage
- Not confirmed
- Cause / method
- Zero-day attack exploiting the CVE-2025-3928 vulnerability
- Location
- United States
Timeline
- Commvault said customer backup data was not affected by the recent breach.
- Commvault confirmed that the CVE-2025-3928 vulnerability had been exploited as a zero-day in the breach of its Azure environment.
- Silk Typhoon was named as the attacker, but Commvault said it had not independently confirmed who was behind the attack.
3 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.