Fortinet, a cybersecurity company, disclosed a compromise on Thursday that affected customer data
In a statement published online, Fortinet disclosed that an intruder gained access to “a restricted number of files” on a third-party shared cloud drive belonging to the company. The files belonged to “less than 0.3%” of Fortinet’s customers. The company stated that the incident did not involve the deployment of ransomware, data encryption, or access to Fortinet’s corporate network.
According to Fortinet’s most recent full-year earnings, the company has “well over half a million customers,” which implies that the intrusion may impact at least 1,500 corporate customers.
Bleeping Computer was the first to disclose the breach, citing a threat actor who claimed on a well-known cybercrime forum that they had stolen 440 gigabytes of Fortinet customer files. TechCrunch has also observed the listing.
Fortinet did not promptly address a request for comment, which included numerous inquiries regarding the intrusion.