Fortinet Confirms 86,000 Working Credentials Harvested in FortiBleed Campaign

Fortinet has responded to the FortiBleed credential-harvesting campaign, confirming that attackers built a database of more than 86,000 working VPN credentials during the operation. The confirmation means the previously reported leaked credentials are not just exposed but actively valid, raising the risk of unauthorized access to FortiGate VPN endpoints. Organizations using FortiGate VPNs should treat credential rotation and authentication log review as urgent rather than precautionary at this point.