This is widespread enough that it's almost certain an organization that impacts you locally was involved. And it's no sure thing they'll notice this report. A moment to send an email to their security team, if you can find it, would be a kindness.
Taggart
Fortinet customers: please take note of this massive breach of SSL VPN credentials. The scale of attacker infrastructure and list of impacted organizations commands attention.
discourse.ifin.netwo...
#ThreatIntel #ThreatIntelligence #IFIN
Last Updated: 2026-06-17T13:15:22Z (UTC) What’s Happening Hudson Rock (Infostealers.com) is reporting a massive dataset of compromised Fortinet credentials and logs associated with exploitation. The dataset comprises 73,932 unique firewall URLs across 21,632 domains. How were these credentials acquired? Fortinet says they were intercepting and cracking SSLVPN authentication. The group’s methodology goes beyond simple credential reuse. They actively intercept SSL VPN authentication hashes a...
