Summary:
SonicWall has disclosed a security incident involving unauthorized access to its MySonicWall cloud backup configuration files. The breach primarily affects backup configurations stored in the cloud, but there is no indication that customer data or other sensitive information was compromised. The company has taken steps to contain the issue and is working with cybersecurity experts to investigate the incident.

Security Officer Comments
The leak appears to be of a confined nature but is a point of concern for cloud backup security. Despite SonicWall assuring customers that their data is secure, the incident indicates the vulnerabilities of cloud-based backup systems, particularly those with configuration files. It is recommended that organizations re-look at their backup security policies and ensure sensitive data is securely stored in cloud environments.

Suggested Corrections:
SonicWall has secured the impacted systems and is working on further strengthening its security measures. Customers are advised to update their passwords and review their MySonicWall account settings for any unusual activity. It is also recommended that businesses apply additional security controls such as multi-factor authentication (MFA) for their cloud services to reduce the risk of unauthorized access.

Link(s):
https://fieldeffect.com/blog/sonicwall-discloses-unauthorized-mysonicwall-access