SonicWall
Disclosed Sep 17, 20251 year agoConfirmed
State hackers stole SonicWall customers' firewall config backups
SonicWall disclosed on September 17, 2025 that firewall configuration backup files stored in MySonicWall cloud accounts were exposed; Mandiant found a state-sponsored actor accessed the backups via an API call. Marquis later blamed its ransomware breach on the incident.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Sep 17, 2025 |
| Attack | Hacking |
| Data exposed | Credentials and tokens, Other |
| Sector | Tech · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| SonicWall says state-sponsored hackers behind September security breachbleepingcomputer.com · News | News |
| SonicWall: Cloud backup security incident investigation completesonicwall.com · The organization | The organization |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Sep 17, 2025 |
History of this record
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.