Reused Passwords Exposed in Massive Fortinet Credential Cache

Cyber researchers have uncovered a huge data cache called FortiBleed containing valid login credentials for Fortinet security systems. The exposed material could give attackers direct access to 74,000 systems across 21,000 organizations worldwide. The discovery was led by security researcher Volodymyr “Bob” Diachenko and analyzed by Hudson Rock and SOCRadar.

The researchers said the breach was not the result of a new technical flaw, but of human and organizational failures in password management. The server contained usernames and passwords, along with automated attack tools that cybercriminals used to launch more than 1 billion login attempts. The attackers relied on credential stuffing, using passwords stolen in earlier breaches to try access on other systems.

According to the report, once attackers entered an organization’s network, they harvested more login details and used them to deepen the intrusion, creating a self-feeding attack chain. The core weakness was password reuse, because the same password can unlock multiple systems if it was exposed in an unrelated breach years earlier. The article warns that even a system administrator using a personal password elsewhere can place an entire organization at risk.

Security experts are urging users and organizations to stop reusing passwords, switch to unique passwords for every service, enable multi-factor authentication, keep systems updated, and regularly check whether credentials have appeared in past breaches. The article says the case shows that no sophisticated vulnerability is always needed, since one leaked password can be enough to breach sensitive networks, including government bodies, multinational companies, and financial institutions.