Article ID: 8833056db47fde23f609a829012170583797d90e78cf4a5d2120dedcbbfb2cc2
Source ID: secondary:businessinsurance.com
Published At: -
Extraction Method: bs4_heuristic
URL: https://www.businessinsurance.com/major-hack-campaign-against-fortinet-devices/
Body Text
Major hack campaign against Fortinet devices - Business Insurance Skip to content Register for free Search Search Log In Risk Management Cyber Risks Pricing Trends Mergers & Acquisitions Technology Sponsored Content WSIA RISKWORLD Workers Comp & Safety Workers Comp Cost Control Pain Management Workplace Safety International EMEA Asia-Pacific Latin America People Events BI Intelligence Top 100 Agents & Brokers Best Places to Work 2025 Lists Directories Insurance Pricing BI Stock Index Magazine Current Issue Past Issues Subscribe Women to Watch ALL INsurance Resources Risk Perspectives Sponsored Content Webinars White Papers Risk Management Cyber Risks Pricing Trends Mergers & Acquisitions Technology Sponsored Content WSIA RISKWORLD Workers Comp & Safety Workers Comp Cost Control Pain Management Workplace Safety International EMEA Asia-Pacific Latin America People Events BI Intelligence Top 100 Agents & Brokers Best Places to Work 2025 Lists Directories Insurance Pricing BI Stock Index Magazine Current Issue Past Issues Subscribe Women to Watch ALL INsurance Resources Risk Perspectives Sponsored Content Webinars White Papers Risk Management Cyber Risks Pricing Trends Mergers & Acquisitions Technology Sponsored Content WSIA RISKWORLD Workers Comp & Safety Workers Comp Cost Control Pain Management Workplace Safety International EMEA Asia-Pacific Latin America People Events BI Intelligence Top 100 Agents & Brokers Best Places to Work 2025 Lists Directories Insurance Pricing BI Stock Index Magazine Current Issue Past Issues Subscribe Women to Watch ALL INsurance Resources Risk Perspectives Sponsored Content Webinars White Papers Risk Management Cyber Risks Pricing Trends Mergers & Acquisitions Technology Sponsored Content WSIA RISKWORLD Workers Comp & Safety Workers Comp Cost Control Pain Management Workplace Safety International EMEA Asia-Pacific Latin America People Events BI Intelligence Top 100 Agents & Brokers Best Places to Work 2025 Lists Directories Insurance Pricing BI Stock Index Magazine Current Issue Past Issues Subscribe Women to Watch ALL INsurance Resources Risk Perspectives Sponsored Content Webinars White Papers Major hack campaign against Fortinet devices Cyber Risks , Risk Management Jun 18, 2026 (Reuters) – Researchers say a sweeping hacking campaign targeting devices made by Fortinet has led to compromises across the internet, with evidence of password theft at Fortune 500 companies and government agencies in more than 15 countries. Most of the affected devices were in the United States, India, and Taiwan, according to Hudson Rock, a firm that tracks cybercrime. Hudson Rock described the scale of the spy campaign as “staggering.” “The scale of this breach touches nearly every sector of the global economy, sparing no industry,” it said in a blog post published on Wednesday. The firm said that some 75,000 Fortinet firewall and VPN devices – tools that companies use to protect their networks and allow employees to log in remotely – had been compromised, potentially allowing the hackers to penetrate deeper into these organizations and steal data. In a statement, Fortinet said it was aware of a campaign to steal login credentials from its firewall and VPN devices. The company said that hackers were drawing on data “from previous incidents” and guessing passwords repeatedly – a technique known as “bruteforcing” to break into target networks or devices. Fortinet said the malicious cyber activity was “not related to any recent incident or advisory.” The company did not immediately respond to questions about the scope of the campaign uncovered by researchers, and Reuters could not establish how many password thefts led to intrusions at the affected companies. Officials at the U.S. cyber defense agency CISA, the FBI, and the Office of the National Cyber Director did not immediately return emails. Cybersecurity officials in India and Taiwan did not immediately return emails. Agencies in the states of Washington and Nevada whose credentials were captured in the data did not immediately respond to a request for comment. A staffer at one agency in South Carolina told Reuters they were unaware of the situation, while another employee said they would look into it before providing any additional information. Nearly 120 distinct credentials across five government entities in Puerto Rico were among those swept up in the campaign, according to cybersecurity research firm Hudson Rock. A spokesperson for the Puerto Rico Police Department, which was included in the list, referred questions to the Puerto Rico Innovation and Technology Service. A spokesperson for the office did not immediately respond to a request for comment. Bob Diachenko, a security researcher and owner of cybersecurity company Securitydiscovery.com, discovered the data in an open server as part of his normal monitoring work, he said in an interview. “This is quite significant,” he said, adding the campaign showed a “very creative approach to bruteforcing, with a multilayer password cracking architecture.” Mr. Diachenko said scripts discovered in the data included Russian-language instructions, suggesting the campaign may be the work of a Russian cybercrime group. Related News HDI names former Berkshire exec US cyber underwriting chief June 18, 2026 Tankers sail through Strait of Hormuz; insurers still cautious June 18, 2026 Sunstar hires former AssuredPartners exec for growth position June 17, 2026 Swiss Re snags former Zurich exec for property role June 17, 2026 King Risk Partners launches transportation practice June 17, 2026 Negligence claim against broker time-barred: Court June 17, 2026 Ohio court upholds PTD benefits for injured nursing worker June 17, 2026 Pa. high court limits comp anti-referral law in pharmacy dispute June 17, 2026 Everest launches reinsurance sidecar with Stone Point June 17, 2026 Facebook-f X-twitter Linkedin-in Business Insurance is a singular, authoritative news and information source for executives focused upon risk management, risk transfer and risk financing. Never miss important news: Become a Business Insurance Online subscriber today Subscribe Now Information About Us Contact Advertise Privacy Policy Terms & Conditions Copyright 2026. BUSINESS INSURANCE HOLDINGS Member, Beacon International Group, Ltd.
Metadata (JSON)
{
"score": 15.666666666666666
}