Massive Password Theft Campaign Targets Business Security Systems

Security researchers have linked a large-scale password theft campaign called FortiBleed to ransomware groups named INC and Lynx. The criminals targeted Fortinet security systems used by businesses to steal login credentials. These stolen passwords are being used to break into company networks and launch ransomware attacks that lock up files and demand payment.

This primarily affects businesses and organizations that use Fortinet security equipment. However, if you work for a company that uses these systems, a breach could expose your work email, employee records, payroll information, and other sensitive data.

Ransomware attacks can also shut down operations, affecting your ability to work and potentially delaying paychecks. If your employer gets hit with ransomware, your personal information in their HR systems may be compromised.

1. Alert your IT department or manager about this threat if they have not already addressed it.
2. Change your work password immediately and make sure it is different from your personal passwords.
3. Enable multi-factor authentication on all work accounts if available.
4. Be suspicious of any unusual requests to download files or click links in work emails.
5. Back up any important work files you are allowed to save locally. Protect yourself from workplace breaches by keeping work and personal accounts completely separate. Never use your work email for personal shopping or social media. Use different passwords for work and home. If your company experiences a ransomware attack or data breach, assume your work information is compromised. Change passwords, watch for identity theft, and consider placing a fraud alert on your credit report. Ask your HR department what information about you might have been exposed.