Sonicwall data theft

[Ditto]

https://www.bleepingcomputer.com/news/security/sonicwall-firewall-configs-stolen-for-all-cloud-backup-customers/

 

This is causing a degree of panic in our office and with our MSP. Anyone else picking up on this or getting updates from SW or their MSP?

[Sibrows]

This caused us a frantic afternoon of password resets and some out of hours reconfiguration of the VPN tunnel to our Azure tenant. After their previous issues we had already retried use of their VPN for remote connections. 
 

I wouldn’t want to be an MSP trying to pick apart this issue. 

[Ditto]

Our MSP called all their technicians back to HQ and did much the same with a lot of password resets. They are working on other, unstated steps, but I think it is fair to assume it is those outlined here https://www.sonicwall.com/support/knowledge-base/mysonicwall-cloud-backup-file-incident/250915160910330

[mcolbourn]

Well, it just gets worse I guess https://www.bleepingcomputer.com/news/security/sonicwall-vpn-accounts-breached-using-stolen-creds-in-widespread-attacks/