logo

Hackers leak configs and VPN credentials for 15,000 FortiGate devices

ID: e0e48237-6e7e-5d7b-9bc0-b623e060f4b7

STIX ID: report--e0e48237-6e7e-5d7b-9bc0-b623e060f4b7

Feed Name: Bleeping Computer

Threat Score
78/100

Date Published: 2025-01-16

Date Updated: 2026-03-27

Author: Lawrence Abrams

...
...

**FortiGate configuration leak:** A new hacking group published a 1.6 GB dump of configs, VPN passwords (including some in plaintext), IP addresses and private keys for over 15,000 FortiGate devices worldwide; the data appears to have been collected in 2022 and is believed to be tied to exploitation of CVE-2022-40684, exposing firewall rules and credentials that should be assumed compromised and rotated immediately.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.