Fortinet, a leading cybersecurity firm, has confirmed a data breach involving a third-party cloud service after a hacker, known by the alias “Fortibitch,” claimed to have stolen 440GB of data.
The breach primarily affects a small number of Fortinet’s Asia-Pacific customers. The compromised data is reportedly stored on a cloud-based shared file drive. The hacker claims to have accessed Fortinet’s Azure SharePoint server and subsequently leaked the data online.
Fortinet first disclosed the breach on September 12, 2024, following the hacker’s announcement on a cybercrime forum.
The hacker shared credentials with an Amazon S3 bucket purportedly containing the stolen data, although Fortinet has not confirmed the specific contents of the data.
Decoding Compliance: What CISOs Need to Know – Join Free Webinar
The cybersecurity firm has assured that its operations, products, and services remain unaffected and that there is no evidence of malicious activity targeting its customers as a result of this incident.
“An individual gained unauthorized access to a limited number of files stored on Fortinet’s instance of a third-party cloud-based shared file drive, which included limited data related to a small number of Fortinet customers, and we have communicated directly with customers as appropriate,” Fortinet spokesperson said.
Hacker’s Claims and Fortinet’s Response
“Fortibitch” has accused Fortinet of failing to secure its cloud infrastructure, especially following its recent acquisitions of cloud security firms like Next DLP and Lacework.
The hacker also alleged that Fortinet’s CEO, Ken Xie, walked away from ransom negotiations, prompting the public release of the data.
While Fortinet has downplayed the breach as involving a “limited number” of files, the hacker’s claim of 440GB of data raises questions about the extent of the breach.
The incident has not required an SEC 8-K disclosure, as Fortinet does not believe it will materially impact its financial condition or operations.
However, the breach highlights cybersecurity firms’ ongoing challenges in protecting sensitive data, especially during system migrations and integrations following acquisitions.
The breach is the latest in a series of security challenges for Fortinet, which has previously dealt with vulnerabilities exploited by hackers. The company continues to monitor the situation and has reiterated its commitment to maintaining the security and integrity of its services.
As the investigation unfolds, Fortinet’s handling of the breach will be closely watched by customers and cybersecurity professionals alike, with the potential for further developments in the hacker’s claims and any additional impacts on Fortinet’s reputation and operations.
Simulating Cyberattack Scenarios With All-in-One Cybersecurity Platform – Watch Free Webinar