Breachesby GlyphSonicWall
Disclosed Sep 17, 2025Confirmed
State hackers stole SonicWall customers' firewall config backups
SonicWall disclosed on September 17, 2025 that firewall configuration backup files stored in MySonicWall cloud accounts were exposed; Mandiant found a state-sponsored actor accessed the backups via an API call. Marquis later blamed its ransomware breach on the incident.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Sep 17, 2025 |
| Attack | Hacking |
| Data exposed | Credentials and tokensOther |
| Sector | Tech · US |
| Status | Confirmed |
Sources
Notices filed
History of this record
First recordedby seedSource
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.