SonicWall cloud backup breach exposes customer firewall configurations
A breach of SonicWall's MySonicWall accounts exposed customer firewall configuration backup files stored in the cloud. The company initially said fewer than 5% of customers were affected and asked them to replace related credentials and tokens. Claims later emerged that all firewall backups had been compromised, and in November SonicWall confirmed that state-sponsored hackers were behind the attack.
Key facts
- Affected organization
- SonicWall
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Not confirmed
- Cause / method
- Brute-force attacks on individual MySonicWall accounts targeting the cloud backup API
- Location
- United States
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
Timeline
- SonicWall disclosed the exposure of customer firewall configuration backups and asked customers to replace related credentials and tokens.
- Claims emerged that all firewall backups had been compromised.
- SonicWall confirmed that state-sponsored hackers were behind the September cloud backup breach.
5 related reports
- SonicWall warns customers to reset credentials after breach
- SonicWall Breached, Firewall Backup Data Exposed
- SonicWall Urges Password Resets After Cloud Backup Breach Affecting Under 5% of Customers
- WARNING: SonicWall Under Attack Following Breach of All Firewall Backups
- SonicWall Confirms State-Sponsored Hackers Behind September Cloud Backup Breach
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.