Fortinet admits miscreant got hold of customer data in the cloud

Fortinet has confirmed that unauthorized access to customer data occurred through a third-party cloud storage service, resulting in a leak of approximately 440GB of files. The company stated that the breach involved a "limited number" of files, affecting less than 0.3 percent of its customers. Fortinet emphasized that its operations and services remain unaffected, and there is no evidence of further access to its resources. The company has terminated the intruder's access and notified law enforcement and cybersecurity agencies. The breach was reportedly linked to a dark web post by an individual claiming to have stolen the data from an unsecured Amazon S3 bucket and demanding a ransom from Fortinet, which the company declined. Fortinet has faced multiple security challenges this year, including critical vulnerabilities and attacks on its devices, raising concerns about its security posture. The company has stated that the incident is not expected to materially impact its financial condition or operations, thus no formal SEC disclosure was deemed necessary.

- Fortinet confirmed a data breach involving unauthorized access to customer information.

- The breach affected less than 0.3 percent of its customers, according to the company.

- The incident involved a significant data leak of 440GB from a third-party cloud storage.

- Fortinet has reported no impact on its operations or services due to the breach.

- The company has faced multiple security issues this year, raising concerns about its overall security.