Skip to content

SonicWall

Disclosed Sep 17, 20251 year agoConfirmed

Official notice

State hackers stole SonicWall customers' firewall config backups

SonicWall disclosed on September 17, 2025 that firewall configuration backup files stored in MySonicWall cloud accounts were exposed; Mandiant found a state-sponsored actor accessed the backups via an API call. Marquis later blamed its ransomware breach on the incident.

What is known

People affectedNot stated in the sources we have
DisclosedSep 17, 2025
AttackHacking
Data exposedCredentials and tokens, Other
SectorTech · US
StatusConfirmed

Sources

Source
SonicWall says state-sponsored hackers behind September security breachbleepingcomputer.com · News
SonicWall: Cloud backup security incident investigation completesonicwall.com · The organization

Notices filed

WhereFiledPeople
ResearchtotalSep 17, 2025
History of this record
  • 2026-09-25 · added · seed source

First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.

Everything about SonicWall

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.