Story perspectives

SonicWall Breach Exposes Cloud Backups, All Customers Affected

11/6/2025

33 8

Summary

Story summary

SonicWall said state-sponsored hackers accessed cloud backup files, affecting all customers globally, in a breach that began in September 2025 via an Application Programming Interface (API) call.
SonicWall engaged Mandiant for investigation and remediation, and confirmed no products, firmware, or customer networks were compromised.
The company initially reported the breach impacted less than 5% of users.
The incident is unrelated to Akira ransomware attacks.

1 of 1

Story summary

SonicWall said state-sponsored hackers accessed cloud backup files, affecting all customers globally, in a breach that began in September 2025 via an Application Programming Interface (API) call.
SonicWall engaged Mandiant for investigation and remediation, and confirmed no products, firmware, or customer networks were compromised.
The company initially reported the breach impacted less than 5% of users.
The incident is unrelated to Akira ransomware attacks.