{"id":14935,"date":"2025-10-11T00:03:31","date_gmt":"2025-10-11T00:03:31","guid":{"rendered":"https:\/\/newestek.com\/?p=14935"},"modified":"2025-10-11T00:03:31","modified_gmt":"2025-10-11T00:03:31","slug":"sonicwall-data-breach-affects-all-cloud-backup-customers","status":"publish","type":"post","link":"https:\/\/newestek.com\/?p=14935","title":{"rendered":"SonicWall data breach affects all cloud backup customers"},"content":{"rendered":"
\n
\n
\n
\n
\n
\n
<\/div>\n<\/section>\n

On Sept. 17, security vendor\u00a0SonicWall announced that cybercriminals had stolen backup files<\/a> configured for cloud backup. At the time, the company claimed the incident was limited to \u201cless than five percent\u201d of its customers. Now, the firewall provider has admitted that \u201call customers\u201d using the MySonicWall cloud backup feature were affected.<\/p>\n

Consequences of the attack<\/h2>\n

According to the company, the stolen files contain encrypted credentials and configuration data. \u201c[W]hile encryption remains in place, possession of these files could increase the risk of targeted attacks,\u201d SonicWall warns in its\u00a0press release<\/a>.<\/p>\n

Security specialist\u00a0Arctic Wolf also warns<\/a> of the consequences of the incident. \u201cFirewall configuration files store sensitive information that can be leveraged by threat actors to exploit and gain access to an organization\u2019s network,\u201d explains Stefan Hostetler, threat intelligence researcher at Arctic Wolf.<\/p>\n

\u201cThese files can provide threat actors with critical information such as user, group, and domain settings, DNS and log settings, and certificates,\u201d he adds. Arctic Wolf has previously observed threat actors, including nation-state and ransomware groups, exfiltrating firewall configuration files to use for future attacks.<\/p>\n

Required security measures<\/h2>\n

SonicWall is currently urging all customers and partners to regularly check their devices for updates. The company has published a list of affected devices on its customer portal under \u201cProduct Management > Issue List.\u201d<\/p>\n

The devices are classified according to urgency:<\/p>\n