logo

SonicWall: Firewall configs stolen for all cloud backup customers

ID: 16699005-f359-5397-bf6a-0bef36eef772

STIX ID: report--16699005-f359-5397-bf6a-0bef36eef772

Feed Name: Bleeping Computer

Threat Score
70/100

Date Published: 2025-10-09

Date Updated: 2026-07-18

Author: Bill Toulas

...
...

SonicWall confirmed that an unauthorized party accessed firewall configuration backup files stored in MySonicWall cloud backup, affecting all customers who used the service; the exposed .EXP files contain AES-256-encrypted credentials and configuration data, and SonicWall has published remediation guidance and an essential credential-reset checklist for administrators to update passwords, API keys, VPN secrets, and other credentials.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.