Fortinet’s Limited Data Breach: How Small is “Small” Really?
Fortinet admits bad actors accessed customer data, calling it “limited.” Yet, a dark web user offers 440GB of stolen files. Just how “limited” can it be?
Hot Take:
When your company name is synonymous with security, a “limited” breach feels a lot like “only a little bit pregnant.” Fortinet might need to update their dictionary—or perhaps their security protocols.
Key Points:
- Fortinet admitted to a breach of a “limited number” of files containing customer data.
- The breach affected less than 0.3% of Fortinet’s customer base.
- No evidence suggests that Fortinet’s operations or other resources were impacted.
- Someone named “Fortibitch” claimed to have 440GB of data and tried to ransom Fortinet.
- Fortinet did not file an SEC form 8-K, arguing the incident wasn’t materially significant.
Already a member? Log in here