Thousands of Fortinet firewalls and Virtual Private Networks (VPNs) used by major companies around the globe have been compromised, according to reports from two cybersecurity firms. The hackers are exploiting pre-existing passwords rather than exploiting unknown vulnerabilities in the devices.

The widespread hacking campaign, dubbed FortiBleed, involves automated tools scanning for exposed devices and breaking into them using known password lists. Once inside, they can steal more sensitive data, creating a cycle of further exploitation.

Fortinet acknowledged the issue, stating that the data involved is from previous incidents rather than new ones. However, cybersecurity firms Hudson Rock and SOCRadar reported over 30,000 devices affected, with evidence pointing to major companies like Accenture, Comcast, and PwC among the victims.

The most affected nations are India, the United States, Taiwan, and Mexico, while industries hit hardest include IT services, construction materials, telecommunications, and government agencies. The hackers appear to be Russian-speaking based on preliminary evidence.

This attack method highlights the importance of strong password management in cybersecurity. Companies must ensure their devices have robust security measures in place to avoid falling victim to such simple yet effective attacks.