- 14 Tem 2024
- 392
- 10
- 355
Fortinet Breached | BF party continues?
Early this morning, a threat actor posted to the "hacking forum" that they had stolen 440GB of data from Fortinet's Azure Sharepoint instance. The threat actor then shared credentials to an alleged S3 bucket where the stolen data is stored for other threat actors to download.
- The threat actor, known as "Fortibitch," claims to have tried to extort Fortinet into paying a ransom, likely to prevent the publishing of data, but the company refused to pay.
The company has confirmed that unknown individual gained access to the "limited number of files" stored on the company’s instance of a third-party cloud-based shared file drive & incident affected customers within the Asia-Pacific region:
“An individual gained unauthorized access to a limited number of files stored on Fortinet’s instance of a third-party cloud-based shared file drive, which included limited data related to a small number of Fortinet customers, and we have communicated directly with customers as appropriate," said a company spokesperson.
The Data Breach the Australian Department of Home Affairs recently discovered it. Currently Fortinet conducting investigations on this incident, to get full view the map of the breach and it's potential impacts to their customers.
While different sources claiming that it's occurred last month, but it's still unclear it's exact timeline.
The firm is certified for use by all Five Eyes nations and has invested “heavily in the federal and defence market in Australia, including investment in local capability and cleared resources to ensure that our solutions are built to serve the Australian government,” Fortinet said in its 2021 submission to the government call for views on Strengthening Australia’s cyber security regulations and incentives.
It is not currently known whether any data pertaining to the Australian federal government or any critical infrastructure was compromised as a result of the incident, nor is the identity of the threat actor behind the breach.
Reference:
https://x.com/H4ckManac/status/1834183362786799684
https://www.cyberdaily.au
