Unauthorized Access to SonicWall Cloud Backup Firewall Preference Files

SonicWall has reported that threat actors accessed encrypted firewall preference backup files stored in its MySonicWall cloud backup service; although the files were encrypted and no unencrypted data was found, they contained credentials, tokens, and configuration details that could facilitate exploitation. The incident affects under 5% of SonicWall’s firewall install base; SonicWall advises customers to check MySonicWall for affected backups, change credentials and tokens for impacted services, monitor logs for abnormal activity, and follow official remediation guidance.