FortiBleed - 73,932 Fortinet Firewalls Compromised: What UK SMEs in the Public Sector Supply Chain Must Do Now
A Russian-speaking threat group has compromised credentials for 73,932 Fortinet FortiGate firewalls across 194 countries - including UK government and Foreign Office email accounts now on sale on the dark web for up to £44,000. The FortiBleed campaign, confirmed by CISA on 18 June 2026 and tracked into UK government networks by S-RM on 10 July 2026, exposes every UK SME in a public-sector supply chain to follow-on intrusion risk without a full credential rotation and governance review.
