Skip to content
SonicWall Blames State Actor for Customer Data Breach

SonicWall Blames State Actor for Customer Data Breach

First seen 6 Nov 2025, 17:37 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 13:27 UTC

SonicWall reported that a state-sponsored threat actor conducted a brute-force attack on its MySonicWall cloud backup service, compromising firewall configuration files of all affected customers. An investigation by Mandiant confirmed the involvement of a state actor, although specific details about the nation or group were not disclosed. SonicWall has initiated security reforms in response to the incident.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 218d ago How this analysis works

More articles in this cluster (3)

Following this threat?

Track Akira, Sonicwall and CVE-2024-40766 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed