Fortinet’s Limited Data Breach: How Small is “Small” Really?

Fortinet admits bad actors accessed customer data, calling it “limited.” Yet, a dark web user offers 440GB of stolen files. Just how “limited” can it be?

Hot Take:

When your company name is synonymous with security, a “limited” breach feels a lot like “only a little bit pregnant.” Fortinet might need to update their dictionary—or perhaps their security protocols.

Key Points:

  • Fortinet admitted to a breach of a “limited number” of files containing customer data.
  • The breach affected less than 0.3% of Fortinet’s customer base.
  • No evidence suggests that Fortinet’s operations or other resources were impacted.
  • Someone named “Fortibitch” claimed to have 440GB of data and tried to ransom Fortinet.
  • Fortinet did not file an SEC form 8-K, arguing the incident wasn’t materially significant.

Membership Required

 You must be a member to access this content.

View Membership Levels
Already a member? Log in here