Sep 17, 2025
1 new incident, 0 with updates.
Started
- ClosedHighNo fix needed
SonicWall: state actor stole firewall config backups of every cloud-backup customer
SonicWall and Mandiant confirmed that a state-sponsored actor used an API call to pull firewall configuration backup files for all customers using MySonicWall cloud backup, after first saying fewer than 5% were affected. The files include credentials and network details, so customers had to reset firewall, VPN, directory and API secrets.
SonicWall MySonicWall cloud backupClosed Nov 5, 2025
