Major Security Device Attack Collected Millions of Passwords. Check Your Business Network.

A massive hacking operation called FortiBleed has been attacking FortiGate firewalls, which are security devices that businesses and organizations use to protect their computer networks. The attack has targeted over 430,000 of these devices around the world. Hackers have been collecting usernames and passwords, then using those stolen credentials to break into other systems. This campaign has been running since February

2026. This attack primarily affects businesses, schools, hospitals, and other organizations that use FortiGate firewall equipment to protect their networks. If you work for a company or if your children attend a school that uses these devices, the hackers may have stolen login credentials that could give them access to sensitive information. While this is not a direct attack on home internet users, it could affect you if an organization you interact with has been compromised. The stolen credentials could potentially be used to access email accounts, employee portals, or customer databases. If you work for an organization, especially if you handle IT or security, contact your technology department immediately to ask if your company uses FortiGate firewalls and whether they have checked for this vulnerability. For everyone else, take these immediate steps:

2027. Change passwords for any work-related accounts, especially if you have not changed them since February