Hackers Steal SonicWall Firewall Configurations

Hackers Accessed Backup Firewall Preference Files Akshaya Asokan (asokan_akshaya) • September 19, 2025

Firewall maker SonicWall is telling customers to reset credentials after hackers stole firewall configuration backup files stored in its cloud service.

See Also: OnDemand Webinar | Trends, Threats and Expert Takeaways: 2025 Global IR Report Insights

The company said Wednesday that hackers launched a series of brute-force attacks against servers storing backup files. They managed to steal the configuration data of roughly 5% of the install base, SonicWall disclosed.

"While credentials within the files were encrypted, the files also included information that could make it easier for attackers to potentially exploit the related firewall," the company said.

SonicWall said hackers don't appear to have published online any of the stolen data - likely because the data is being held for "potential further use by threat actors."

"These files may supply threat actors with critical information ...