Marquis Takes Legal Action Against SonicWall Over Ransomware Attack from Backup Breach
ID: ee83ef15-4611-5be5-8a63-dccfed6665f6
STIX ID: report--ee83ef15-4611-5be5-8a63-dccfed6665f6
Feed Name: GBHackers
Threat Score
Marquis Software Solutions alleges that a February 2025 API change in SonicWall’s MySonicWall cloud service allowed attackers to download customer firewall backups by guessing serial numbers, exposing unencrypted MFA scratch codes, credentials and certificates; attackers used the exposed MFA codes to bypass two‑factor authentication and execute a ransomware attack on Marquis, with the cloud breach reportedly persisting for months and affecting all customers.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.