Skip to content
SonicWall Investigates State-Backed Breach of Cloud Backup Service

SonicWall Investigates State-Backed Breach of Cloud Backup Service

First seen 23 Nov 2025, 03:35 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 13:27 UTC

SonicWall reported a security incident involving unauthorized access to backup firewall configuration files stored in a cloud environment. The company attributed the breach to a state-backed threat actor and engaged Mandiant for an investigation, which confirmed the attack's scope. All customers using the MySonicWall backup service were affected, although no other SonicWall products were compromised.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 221d ago How this analysis works

More articles in this cluster (8)

Following this threat?

Track Akira and Sonicwall in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed