Hackers have breached roughly 75,000 Fortinet firewalls belonging to corporations and government agencies worldwide, or roughly half of all Fortinet firewalls exposed to the internet, security researchers have said.

A database of Fortinet VPN credentials accidentally discovered by security researcher Bob Diachenko included access tokens for companies including Chevron, Samsung, Foxconn, Comcast, AT&T, Mercedes-Benz, Toyota, Sinopec, State Grid and other, researchers said.

VPNs associated with Fortinet’s own firewall were breached, according to researchers.

Image credit: Juniper Networks

VPN credentials