Back Feeds.4Sysops

Massive Fortinet breach exposes credentials for thousands of global networks

Feeds.4Sysops •IT News • June 18, 2026

A widespread automated attack campaign has compromised approximately 74,000 Fortinet devices across 194 countries, creating a massive database of verified corporate credentials. Attackers utilized large-scale scans and a specialized GPU cluster to crack encrypted authentication hashes and intercept VPN connection data. The breach affects high-profile organizations including Oracle, FedEx, and various government entities, with some attackers gaining deep access to internal networks. Source

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

FortiBleed Campaign Compromises 75,000+ Fortinet Devices Globally A credential-harvesting campaign known as 'FortiBleed' has compromised over 75,000 Fortinet firewalls and VPNs across 194 countries. The attackers, suspected to be Russian-speaking cybercriminals, exploited previously leaked credentials and conducted over 1.16 billion credential attempts against FortiGate devices. The exposed dataset includes verified usernames and passwords for major corporations and government agencies, allowing potential unauthorized access to sensitive networks. Researchers identified the campaign's extensive reach, with significant impacts on sectors such as telecommunications, healthcare, and government. The operation is ongoing, with automated tools continuously testing the compromised credentials. Security experts emphasize the need for immediate password changes and enhanced security measures. Fortinet acknowledged the situation but stated it was not linked to any recent vulnerabilities. 72 sources 75

Extracted Entities

Massive Fortinet breach exposes credentials for thousands of global networks

The full story

Extracted Entities

Attack Types (1)

Companies (3)

Industries (1)

MITRE ATT&CK (1)