logo

Negotiation fails: Data analysis of 440GB leak from Fortinet Sharepoint

ID: c940c1cd-6c81-5ed8-a90d-7e1534d72b49

STIX ID: report--c940c1cd-6c81-5ed8-a90d-7e1534d72b49

Feed Name: CloudSEK Blog

Threat Score
78/100

Date Published: 2024-09-17

Date Updated: 2026-04-27

...
...

On 12 September 2024 CloudSEK's XVigil discovered a threat actor calling itself "Fortibitch" publicly posting 440GB of data allegedly exfiltrated from Fortinet's SharePoint after failed extortion attempts; the leak reportedly contains employee, finance, HR, customer data, network diagrams, packet captures and internal incident reports, and attribution cites a likely Ukraine-based actor with medium confidence.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.