Data From 15,000 Fortinet Firewalls Leaked by Hackers

Summary: A hacker group named Belsen Group has leaked data from approximately 15,000 Fortinet firewalls, claiming it is their first official operation. The leaked information includes sensitive data such as IP addresses, passwords, and configurations, likely obtained by exploiting a vulnerability (CVE-2022–40684) back in 2022. Security researcher Kevin Beaumont confirmed the authenticity of the data and warned that it poses ongoing risks to organizations with potentially unpatched devices.

Threat Actor: Belsen Group | Belsen Group
Victim: Fortinet | Fortinet

Keypoints :

• The leaked data includes IP addresses, usernames, passwords, and firewall configurations.
• The data was likely collected in October 2022 through the exploitation of CVE-2022–40684.
• Security researcher Kevin Beaumont warns that the leaked configurations could still pose risks to organizations, as many affected devices remain online.