Massive Data Breach Exposes Fortinet VPN Credentials Globally

WHO:

Ars Technica - The affected organizations include Oracle, Lenovo, FedEx, and a NATO contractor.

TechCrunch - An alleged Russian-speaking group of cybercriminals is reportedly involved in the hacking.

Techmeme - The data leak involves Fortinet and FortiGate VPN credentials.

WHAT:

Ars Technica - The breach has exposed credentials for thousands of sensitive networks.

NO_NEW_FACTS

Techmeme - A newly discovered data leak has exposed a collection of Fortinet and FortiGate VPN credentials for 73,932 firewall URLs.

Techmeme - The data leak affects companies across 194 countries.

WHERE:

Techmeme - The data leak impacts firewall URLs located in 194 countries globally.

WHEN:

Techmeme - The data leak is referred to as "FortiBleed."

WHY:

TechCrunch - The cybercriminals are reportedly compromising and targeting major companies using Fortinet Firewalls and VPNs through previously known passwords.

HOW:

TechCrunch - The hacking is conducted through the use of previously known passwords.

(UPDATED June 17, 2026 23:26 UTC)

A significant data breach has exposed credentials for thousands of sensitive networks, affecting major organizations like Oracle, Lenovo, FedEx, and a NATO contractor. This incident highlights the ongoing vulnerabilities in cybersecurity that can impact even the largest companies and government contractors. As investigations continue, the focus will be on how to prevent such breaches in the future.

--

(UPDATED June 17, 2026 19:50 UTC)

A newly discovered data leak, referred to as "FortiBleed," has exposed Fortinet and FortiGate VPN credentials for over seventy-three thousand firewall URLs, affecting companies across one hundred ninety-four countries. Reports indicate that an alleged Russian-speaking group of cybercriminals is behind this hacking, compromising major companies by exploiting previously known passwords. The impact of this breach is significant, as it targets critical infrastructure globally, raising concerns about cybersecurity across various industries.