All SonicWall Cloud Backup Users Had Firewall Configurations Stolen

All SonicWall Cloud Backup users were affected after hackers accessed the backup firewall preference files stored in the MySonicWall cloud backup service, with the incident occurring in early September and disclosed a couple of weeks later.

In an October update, the company said the threat actors accessed the preference files of all firewalls configured to back up to the MySonicWall cloud, describing the files as containing encrypted credentials and configuration data that could increase the risk of targeted attacks.

SonicWall has published a list of impacted devices to the MySonicWall portal, and customers are urged to log in, check device serial numbers, and assess risk; devices are categorised as Active – High Priority, Active – Lower Priority, or Inactive. The firm instructs customers to reset all passwords and follow its containment and remediation guidance to resolve the issue, while noting it is collaborating with Mandiant to enhance cloud infrastructure and monitoring systems.

Written by Ionut Arghire, the piece emphasizes that affected partners and customers are being notified and provided with assessment tools. according to SonicWall.