Sunday, May 4, 2025
HomeCyber security CourseFortinet Confirms Data Breach Following Hacker's Claim of 440GB Data Theft

Fortinet Confirms Data Breach Following Hacker’s Claim of 440GB Data Theft

Published on

SIEM as a Service

Follow Us on Google News

Fortinet, a leading cybersecurity firm, has confirmed a data breach involving a third-party cloud service after a hacker, known by the alias “Fortibitch,” claimed to have stolen 440GB of data.

The breach primarily affects a small number of Fortinet’s Asia-Pacific customers. The compromised data is reportedly stored on a cloud-based shared file drive. The hacker claims to have accessed Fortinet’s Azure SharePoint server and subsequently leaked the data online.

Fortinet first disclosed the breach on September 12, 2024, following the hacker’s announcement on a cybercrime forum.

- Advertisement - Google News

The hacker shared credentials with an Amazon S3 bucket purportedly containing the stolen data, although Fortinet has not confirmed the specific contents of the data.

Decoding Compliance: What CISOs Need to Know – Join Free Webinar

The cybersecurity firm has assured that its operations, products, and services remain unaffected and that there is no evidence of malicious activity targeting its customers as a result of this incident.

“An individual gained unauthorized access to a limited number of files stored on Fortinet’s instance of a third-party cloud-based shared file drive, which included limited data related to a small number of Fortinet customers, and we have communicated directly with customers as appropriate,” Fortinet spokesperson said.

Hacker’s Claims and Fortinet’s Response

“Fortibitch” has accused Fortinet of failing to secure its cloud infrastructure, especially following its recent acquisitions of cloud security firms like Next DLP and Lacework.

The hacker also alleged that Fortinet’s CEO, Ken Xie, walked away from ransom negotiations, prompting the public release of the data.

While Fortinet has downplayed the breach as involving a “limited number” of files, the hacker’s claim of 440GB of data raises questions about the extent of the breach.

Hacker Claim

The incident has not required an SEC 8-K disclosure, as Fortinet does not believe it will materially impact its financial condition or operations.

However, the breach highlights cybersecurity firms’ ongoing challenges in protecting sensitive data, especially during system migrations and integrations following acquisitions.

The breach is the latest in a series of security challenges for Fortinet, which has previously dealt with vulnerabilities exploited by hackers. The company continues to monitor the situation and has reiterated its commitment to maintaining the security and integrity of its services.

As the investigation unfolds, Fortinet’s handling of the breach will be closely watched by customers and cybersecurity professionals alike, with the potential for further developments in the hacker’s claims and any additional impacts on Fortinet’s reputation and operations.

Simulating Cyberattack Scenarios With All-in-One Cybersecurity Platform – Watch Free Webinar

Aman Mishra
Aman Mishra
Aman Mishra is a Security and privacy Reporter covering various data breach, cyber crime, malware, & vulnerability.

Latest articles

MintsLoader Malware Uses Sandbox and Virtual Machine Evasion Techniques

MintsLoader, a malicious loader first observed in 2024, has emerged as a formidable tool...

Threat Actors Use AiTM Attacks with Reverse Proxies to Bypass MFA

Cybercriminals are intensifying their efforts to undermine multi-factor authentication (MFA) through adversary-in-the-middle (AiTM) attacks,...

Threat Actors Target Critical National Infrastructure with New Malware and Tools

A recent investigation by the FortiGuard Incident Response (FGIR) team has uncovered a sophisticated,...

New StealC V2 Upgrade Targets Microsoft Installer Packages and PowerShell Scripts

StealC, a notorious information stealer and malware downloader first sold in January 2023, has...

Resilience at Scale

Why Application Security is Non-Negotiable

The resilience of your digital infrastructure directly impacts your ability to scale. And yet, application security remains a critical weak link for most organizations.

Application Security is no longer just a defensive play—it’s the cornerstone of cyber resilience and sustainable growth. In this webinar, Karthik Krishnamoorthy (CTO of Indusface) and Phani Deepak Akella (VP of Marketing – Indusface), will share how AI-powered application security can help organizations build resilience by

Discussion points


Protecting at internet scale using AI and behavioral-based DDoS & bot mitigation.
Autonomously discovering external assets and remediating vulnerabilities within 72 hours, enabling secure, confident scaling.
Ensuring 100% application availability through platforms architected for failure resilience.
Eliminating silos with real-time correlation between attack surface and active threats for rapid, accurate mitigation

More like this

MintsLoader Malware Uses Sandbox and Virtual Machine Evasion Techniques

MintsLoader, a malicious loader first observed in 2024, has emerged as a formidable tool...

Threat Actors Use AiTM Attacks with Reverse Proxies to Bypass MFA

Cybercriminals are intensifying their efforts to undermine multi-factor authentication (MFA) through adversary-in-the-middle (AiTM) attacks,...

Threat Actors Target Critical National Infrastructure with New Malware and Tools

A recent investigation by the FortiGuard Incident Response (FGIR) team has uncovered a sophisticated,...